diff --git a/puppet/zulip_ops/templates/iptables/rules.v4.erb b/puppet/zulip_ops/templates/iptables/rules.v4.erb
index fc8b2bbf34..eb93cca3de 100644
--- a/puppet/zulip_ops/templates/iptables/rules.v4.erb
+++ b/puppet/zulip_ops/templates/iptables/rules.v4.erb
@@ -40,9 +40,14 @@
 -A INPUT -p tcp --dport https      -j ACCEPT
 -A INPUT -p tcp --dport postgresql -j ACCEPT
 
+<% if @fqdn.include? "smokescreen" -%>
 #                       Smokescreen proxy
 -A INPUT -p tcp --dport 4750       -j ACCEPT
 
+#                       Camo proxy
+-A INPUT -p tcp --dport 9292       -j ACCEPT
+<% end -%>
+
 #                       statsd
 -A INPUT -p udp --dport 8125       -j ACCEPT
 <% end -%>