diff --git a/inventory/group_vars/proxies b/inventory/group_vars/proxies
index 8901de118e..1f9130d447 100644
--- a/inventory/group_vars/proxies
+++ b/inventory/group_vars/proxies
@@ -65,6 +65,10 @@ custom_rules: [
     '-A INPUT -p tcp -m tcp --dport 9941 -s 10.5.124.207 -j ACCEPT',
     # Allow openqa01 to talk to the inbound fedmsg relay.
     '-A INPUT -p tcp -m tcp --dport 9941 -s 10.5.131.71 -j ACCEPT',
+
+    # For Zanata, redirect 443/tcp -> 43342/tcp for TLS reasons
+    # See files/httpd/website_id_fp_o_zanata.conf for info
+    '-t nat -A PREROUTING -s 209.132.183.252 -p tcp --dport 443 -j REDIRECT --to 44342'
  ]
 
 blocked_ips: [