diff --git a/inventory/group_vars/koji b/inventory/group_vars/koji
index bf83dcc71c..aadc15d88d 100644
--- a/inventory/group_vars/koji
+++ b/inventory/group_vars/koji
@@ -12,6 +12,9 @@ tcp_ports: [ 80, 443, 111, 2049,
 
 udp_ports: [ 111, 2049 ]
 
+# Needed for keepalived
+custom_rules: [ '-A INPUT -d 224.0.0.0/8 -j ACCEPT', '-A INPUT INPUT -p vrrp -j ACCEPT' ]
+
 fas_client_groups: sysadmin-releng
 
 # These are consumed by a task in roles/fedmsg/base/main.yml