diff --git a/m/module/slurm-firewall.nix b/m/module/slurm-firewall.nix
new file mode 100644
index 0000000..8f52022
--- /dev/null
+++ b/m/module/slurm-firewall.nix
@@ -0,0 +1,8 @@
+{ ... }:
+
+{
+  networking.firewall = {
+    # Required for PMIx in SLURM, we should find a better way
+    allowedTCPPortRanges = [ { from=1024; to=65535; } ];
+  };
+}
diff --git a/m/owl1/configuration.nix b/m/owl1/configuration.nix
index 8255898..5afda72 100644
--- a/m/owl1/configuration.nix
+++ b/m/owl1/configuration.nix
@@ -4,6 +4,7 @@
   imports = [
     ../common/main.nix
     ../module/ceph.nix
+    ../module/slurm-firewall.nix
   ];
 
   # Select the this using the ID to avoid mismatches
diff --git a/m/owl2/configuration.nix b/m/owl2/configuration.nix
index 0af3c40..9636760 100644
--- a/m/owl2/configuration.nix
+++ b/m/owl2/configuration.nix
@@ -4,6 +4,7 @@
   imports = [
     ../common/main.nix
     ../module/ceph.nix
+    ../module/slurm-firewall.nix
   ];
 
   # Select the this using the ID to avoid mismatches