diff --git a/README.rst b/README.rst
index e5d96da725..2f44c7f40f 100644
--- a/README.rst
+++ b/README.rst
@@ -140,3 +140,5 @@ and should be executed according to the following table:
 +----------------+--------+--------+--------+--------+--------+--------+--------+--------+--------+--------+--------+
 | rear           |        |    X   |        |        |        |        |        |        |        |        |        |
 +----------------+--------+--------+--------+--------+--------+--------+--------+--------+--------+--------+--------+
+| Extra Firewall |        |        |        |    X   |        |        |        |        |        |        |        |
++----------------+--------+--------+--------+--------+--------+--------+--------+--------+--------+--------+--------+
diff --git a/ci/environments/scenario003-standalone.yaml b/ci/environments/scenario003-standalone.yaml
index bc4fcb0be4..29033a2851 100644
--- a/ci/environments/scenario003-standalone.yaml
+++ b/ci/environments/scenario003-standalone.yaml
@@ -78,3 +78,14 @@ parameter_defaults:
             rndc_port: 953
             rndc_key_file: /etc/rndc.key
   ContainerCli: podman
+  ExtraFirewallRules:
+    '301 allow arbitrary tcp rule':
+      dport: 12345
+      proto: tcp
+      source: 127.0.0.1
+      action: insert
+    '302 allow arbitrary udp rule':
+      dport: 12345
+      proto: udp
+      source: 127.0.0.1
+      action: append