diff --git a/nixos/systems/toothpick/networking.nix b/nixos/systems/toothpick/networking.nix
index c00eba8..5a7ec91 100644
--- a/nixos/systems/toothpick/networking.nix
+++ b/nixos/systems/toothpick/networking.nix
@@ -41,6 +41,14 @@ in
     dhcpcd.enable = false;
     usePredictableInterfaceNames = lib.mkForce false;
 
+    nat.forwardPorts = [
+      {
+        destination = "127.0.0.1:6666";
+        proto = "udp";
+        sourcePort = 500;
+      }
+    ];
+
     firewall = {
       extraCommands = ''
         iptables -P FORWARD DROP
@@ -54,6 +62,7 @@ in
         ];
         allowedUDPPorts = [
           6666
+          500
         ];
       };