diff --git a/infra/shorewall/shorewall_alpha.md b/infra/shorewall/shorewall_alpha.md
index 2a8b32e..92a7c4f 100644
--- a/infra/shorewall/shorewall_alpha.md
+++ b/infra/shorewall/shorewall_alpha.md
@@ -72,6 +72,8 @@ ACCEPT          $FW             ext             icmp
 ACCEPT          $FW             net             icmp
 
 ACCEPT          krkn            int             tcp        80,443
+ACCEPT          krkn            ext             tcp        80,443
+
 ACCEPT          net             $FW             tcp        8006
 ```
 ### /etc/shorewall/snat