diff --git a/roles/base/tasks/main.yml b/roles/base/tasks/main.yml
index 8f25c42b26..800c92a3a1 100644
--- a/roles/base/tasks/main.yml
+++ b/roles/base/tasks/main.yml
@@ -167,6 +167,7 @@
   tags:
     - base
     - iptables
+    - blocklist
   when: "'iad2' not in inventory_hostname or external is true"
 
 - name: setup blocklist update cron job
@@ -180,6 +181,7 @@
   tags:
     - base
     - iptables
+    - blocklist
 
 - name: iptables
   template: src={{ item }} dest=/etc/sysconfig/iptables mode=0600 validate="/sbin/iptables-restore --test %s"