diff --git a/roles/base/templates/iptables/iptables.mm-frontend-checkin01.phx2.fedoraproject.org b/roles/base/templates/iptables/iptables.mm-frontend-checkin01.phx2.fedoraproject.org
index b39fb0ffc5..3563088b4a 100644
--- a/roles/base/templates/iptables/iptables.mm-frontend-checkin01.phx2.fedoraproject.org
+++ b/roles/base/templates/iptables/iptables.mm-frontend-checkin01.phx2.fedoraproject.org
@@ -36,6 +36,11 @@
 -A OUTPUT --dst 10.5.126.22 -p udp -m udp --dport 53 -j ACCEPT
 -A OUTPUT --dst 10.5.126.22 -p tcp -m tcp --dport 53 -j ACCEPT
 
+# Allow totpcgi
+-A OUTPUT --dst 10.5.126.25 -p tcp -m tcp --dport 8443 -j ACCEPT
+-A OUTPUT --dst 10.5.126.26 -p tcp -m tcp --dport 8443 -j ACCEPT
+-A OUTPUT --dst 10.5.126.30 -p tcp -m tcp --dport 8443 -j ACCEPT
+
 # Allow infrastructure.fp.o http and https
 -A OUTPUT --dst 10.5.126.23 -p tcp -m tcp --dport 80 -j ACCEPT
 -A OUTPUT --dst 10.5.126.23 -p tcp -m tcp --dport 443 -j ACCEPT