diff --git a/hosts/iso/default.nix b/hosts/iso/default.nix
index c36b4f1..89246d1 100644
--- a/hosts/iso/default.nix
+++ b/hosts/iso/default.nix
@@ -6,4 +6,5 @@
   isoImage.squashfsCompression = "gzip -Xcompression-level 1";
   systemd.services.sshd.wantedBy = lib.mkForce [ "multi-user.target" ];
   networking.networkmanager.enable = false;
+  services.openssh.openFirewall = lib.mkForce true;
 }