diff --git a/inventory/group_vars/basset b/inventory/group_vars/basset
index 8b21f69607..95e9672cd6 100644
--- a/inventory/group_vars/basset
+++ b/inventory/group_vars/basset
@@ -12,6 +12,8 @@ custom_rules: [
     # wiki01, wiki02
     '-A INPUT -p tcp -m tcp -s 10.5.126.63   --dport 80 -j ACCEPT',
     '-A INPUT -p tcp -m tcp -s 10.5.126.73   --dport 80 -j ACCEPT',
+    # hosted03.vpn
+    '-A INPUT -p tcp -m tcp -s 192.168.1.16  --dport 80 -j ACCEPT',
 ]
 
 fas_client_groups: sysadmin-main
diff --git a/roles/basset/frontend/templates/frontend.cfg.j2 b/roles/basset/frontend/templates/frontend.cfg.j2
index 47fbf97d76..6b6a431483 100644
--- a/roles/basset/frontend/templates/frontend.cfg.j2
+++ b/roles/basset/frontend/templates/frontend.cfg.j2
@@ -8,4 +8,5 @@
 10.5.126.25 = fedora.fas.registration,fedora.fas.cla_sign
 10.5.126.26 = fedora.fas.registration,fedora.fas.cla_sign
 10.5.126.30 = fedora.fas.registration,fedora.fas.cla_sign
+192.168.1.16 = trac.ticket.new,trac.ticket.update,trac.ticket.delete,trac.wiki.page.new,trac.wiki.page.update,trac.wiki.page.delete,trac.wiki.page.version.delete,trac.wiki.page.rename
 {% endif %}