diff --git a/elements/mysql-common/os-refresh-config/pre-configure.d/97-mysql-galera-iptables b/elements/mysql-common/os-refresh-config/pre-configure.d/97-mysql-galera-iptables
index b51656251..a51363340 100755
--- a/elements/mysql-common/os-refresh-config/pre-configure.d/97-mysql-galera-iptables
+++ b/elements/mysql-common/os-refresh-config/pre-configure.d/97-mysql-galera-iptables
@@ -2,3 +2,5 @@
 set -eu
 
 add-rule INPUT -p tcp --dport 4567 -j ACCEPT  # galera
+add-rule INPUT -p tcp --dport 4568 -j ACCEPT  # galera
+add-rule INPUT -p tcp --dport 4444 -j ACCEPT  # mysql cluster
diff --git a/elements/nova-api/os-refresh-config/pre-configure.d/97-nova-api-fedora-iptables b/elements/nova-api/os-refresh-config/pre-configure.d/97-nova-api-fedora-iptables
index 57c6ed392..91c81551a 100755
--- a/elements/nova-api/os-refresh-config/pre-configure.d/97-nova-api-fedora-iptables
+++ b/elements/nova-api/os-refresh-config/pre-configure.d/97-nova-api-fedora-iptables
@@ -2,4 +2,4 @@
 set -eu
 
 # nova-api, nova-api-metadata
-add-rule INPUT -p tcp -m multiport --dports 8774,8775 -j ACCEPT
+add-rule INPUT -p tcp -m multiport --dports 8773,8774,8775 -j ACCEPT