diff --git a/seqs/kodi.sh b/seqs/kodi.sh
index e1be9a3..7350ba9 100755
--- a/seqs/kodi.sh
+++ b/seqs/kodi.sh
@@ -173,6 +173,14 @@ step_12() {
   exe systemctl start "$kodiSyslogName"
 }
 
+step_14_info() { echo "Add ufw rules for kodi"; }
+step_14_alias() { echo "ufw"; }
+step_14() {
+  exe ufw allow in on eth0 to any proto tcp port 8080 comment "kodi remote"
+  exe ufw allow in on eth0 to any proto tcp port 9090 comment "kodi jsonrpc"
+  exe ufw allow in on eth0 to any proto udp port 9777 comment "kodi event client"
+}
+
 step_40_info() { echo "Reset music database"; }
 step_40_alias() { echo "resetmusic"; }
 step_40() {