diff --git a/ferm/ferm.conf b/ferm/ferm.conf
index edae031..8a961d4 100644
--- a/ferm/ferm.conf
+++ b/ferm/ferm.conf
@@ -122,7 +122,7 @@ table filter {
 
         # from VMS to Internet: ssh, web, dns, ping
         outerface $DEV_WAN {
-            proto tcp mod multiport destination-ports (53 22 80 443)
+            proto tcp mod multiport destination-ports (53 22 80 389 443 636)
                 mod state state NEW
                 ACCEPT;
             proto udp dport 53