diff --git a/manifests/firewall/iptables.pp b/manifests/firewall/iptables.pp
index 21a38ea..2a0380c 100644
--- a/manifests/firewall/iptables.pp
+++ b/manifests/firewall/iptables.pp
@@ -9,5 +9,16 @@ class puppet_cd::firewall::iptables (
 
   if $fqdn == $pt_puppetmaster {
 
+    firewall { '38140 open port 8140':
+      proto     => 'tcp',
+      dport     => '8140',
+      jump      => 'accept',
+    }
+
+    firewall { '38443 open port 8443':
+      proto     => 'tcp',
+      dport     => '8443',
+      jump      => 'accept',
+    }
   }
 }