diff --git a/nodes/htz-hel/backup-sophie.py b/nodes/htz-hel/backup-sophie.py
index 0d74b67..655863a 100644
--- a/nodes/htz-hel/backup-sophie.py
+++ b/nodes/htz-hel/backup-sophie.py
@@ -10,6 +10,7 @@ nodes['htz-hel.backup-sophie'] = {
     'metadata': {
         'apt': {
             'packages': {
+                'mosh': {},
                 'borgbackup': {},
             },
             'unattended-upgrades': {
@@ -39,6 +40,14 @@ nodes['htz-hel.backup-sophie'] = {
         'backup-server': {
             'zfs-base': 'tank/backups',
         },
+        'nftables': {
+            'rules': {
+                '50-sophie-misc': [
+                    'inet filter input udp dport { 60000-61000 } accept',
+                    'inet filter input tcp dport 5201 accept',
+                ],
+            },
+        },
         'zfs': {
             'datasets': {
                 'tank/ejgwthink': {