diff --git a/modules/build-types/pxe-boot.nix b/modules/build-types/pxe-boot.nix
index f8961f8..af4dc2a 100644
--- a/modules/build-types/pxe-boot.nix
+++ b/modules/build-types/pxe-boot.nix
@@ -447,5 +447,5 @@ in
   };
 
   networking.firewall.allowedTCPPorts = [ vars.ports.pxeBootHttp ];
-  networking.firewall.allowedUDPPorts = [ vars.ports.pxeBootTftp 67 ];
+  networking.firewall.allowedUDPPorts = [ vars.ports.pxeBootTftp 67 4011 ];
 }