diff --git a/base.nix b/base.nix
index 0988cf1..e8d94ef 100644
--- a/base.nix
+++ b/base.nix
@@ -165,6 +165,7 @@
       enable = true;
       connectionConfig."connection.mdns" = "yes";
     };
+    firewall.allowedUDPPorts = [ 5353 ]; # mDNS
     tempAddresses = "disabled";
   };
   services.resolved.enable = true;