diff --git a/site/profile/manifests/jupyterhub.pp b/site/profile/manifests/jupyterhub.pp
index 54be4dac1..d6131f87a 100644
--- a/site/profile/manifests/jupyterhub.pp
+++ b/site/profile/manifests/jupyterhub.pp
@@ -43,6 +43,9 @@
       Class['profile::software_stack'] -> Class['jupyterhub::kernel::venv']
     }
   }
+  nftables::rule { 'default_in-jupyter_server':
+    content => "tcp dport 32768-60999 accept comment \"Accept jupyter_server\"",
+  }
 }
 
 class profile::jupyterhub::hub::keytab {