diff --git a/nftables-mail.conf b/nftables-mail.conf
index f6a05df..4078e43 100644
--- a/nftables-mail.conf
+++ b/nftables-mail.conf
@@ -7,7 +7,7 @@ table inet filter {
         type filter hook prerouting priority raw
 
         iif lo notrack accept
-        tcp dport {22, 25, 80, 465, 993} notrack accept
+        tcp dport {22, 25, 80, 443, 465, 993} notrack accept
         meta l4proto {icmp, ipv6-icmp} notrack accept
     }
 
@@ -15,7 +15,7 @@ table inet filter {
         type filter hook output priority raw
 
         oif lo notrack accept
-        tcp sport {22, 25, 80, 465, 993} notrack accept
+        tcp sport {22, 25, 80, 443, 465, 993} notrack accept
         meta l4proto {icmp, ipv6-icmp} notrack accept
     }
 
@@ -24,8 +24,8 @@ table inet filter {
         policy drop
 
         iif lo accept
-        tcp dport {22, 25, 80, 465, 993} ip daddr {{ipv4_address}} accept
-        tcp dport {22, 25, 80, 465, 993} ip6 daddr {{ipv6_address}} accept
+        tcp dport {22, 25, 80, 443, 465, 993} ip daddr {{ipv4_address}} accept
+        tcp dport {22, 25, 80, 443, 465, 993} ip6 daddr {{ipv6_address}} accept
         meta l4proto {icmp, ipv6-icmp} accept
 
         ct state vmap { invalid : drop, established : accept, related : accept }
@@ -44,7 +44,7 @@ table inet filter {
         type filter hook output priority filter
 
         oif lo goto output-internal
-        skuid != {root, systemd-network, unbound, chrony, postfix, dovecot, dovenull} counter goto output-reject
+        skuid != {root, systemd-network, unbound, chrony, postfix, dovecot, dovenull, http} counter goto output-reject
     }
 
     chain output-internal {