diff --git a/inventory/group_vars/mirrorlist b/inventory/group_vars/mirrorlist
index 297a6d0e60..13c574ca28 100644
--- a/inventory/group_vars/mirrorlist
+++ b/inventory/group_vars/mirrorlist
@@ -5,7 +5,7 @@ num_cpus: 4
 # for systems that do not match the above - specify the same parameter in
 # the host_vars/$hostname file
 
-tcp_ports: [ 80 ]
+custom_rules: [ '-A INPUT -p tcp -m tcp -s 192.168.0.0/16 --dport 80 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 10.5.126.0/24 --dport 80 -j ACCEPT' ]
 collectd_apache: true
 fas_client_groups: sysadmin-noc,fi-apprentice
 nrpe_procs_warn: 500