diff --git a/group_vars/dch-gw/dch-network.yml b/group_vars/dch-gw/dch-network.yml
index cf231c5..4c3da5c 100644
--- a/group_vars/dch-gw/dch-network.yml
+++ b/group_vars/dch-gw/dch-network.yml
@@ -110,5 +110,7 @@ allow_outgoing:
   port: domain
 - protocol: tcp
   port: domain
+- protocol: udp
+  port: ntp
 
 trace_dropped: true