diff --git a/config-parts/firewall-ipv4.sh b/config-parts/firewall-ipv4.sh
index 266d818..eb9f8be 100644
--- a/config-parts/firewall-ipv4.sh
+++ b/config-parts/firewall-ipv4.sh
@@ -519,6 +519,10 @@ set firewall ipv4 name trusted-local rule 420 action 'accept'
 set firewall ipv4 name trusted-local rule 420 description 'Rule: accept_wireguard'
 set firewall ipv4 name trusted-local rule 420 destination port '51820'
 set firewall ipv4 name trusted-local rule 420 protocol 'udp'
+set firewall ipv4 name trusted-local rule 430 action 'accept'
+set firewall ipv4 name trusted-local rule 430 description 'Rule: accept_vnstat_web'
+set firewall ipv4 name trusted-local rule 430 destination port '8685'
+set firewall ipv4 name trusted-local rule 430 protocol 'tcp'
 set firewall ipv4 name trusted-local rule 999 action 'drop'
 set firewall ipv4 name trusted-local rule 999 description 'Rule: drop_invalid'
 set firewall ipv4 name trusted-local rule 999 state invalid