diff --git a/firewall/README.md b/firewall/README.md
new file mode 100644
index 0000000..72ffd2e
--- /dev/null
+++ b/firewall/README.md
@@ -0,0 +1,13 @@
+# Firewall
+
+This page is mostly a placeholder for now, but configuration of the firewall
+is -of course- very important.
+
+First idea: the ports that need to be opened are:
+
+
+| Port(s) / range | Protocol | Application |
+| :--: | :--: | :-- |
+| 80/443 | TCP | Reverse proxy |
+| 8443 | TCP | Synapse, federation |
+