diff --git a/common.nix b/common.nix
index 7d6a4bb..5cf1757 100644
--- a/common.nix
+++ b/common.nix
@@ -88,6 +88,8 @@ all: {
   networking.firewall.enable = lib.mkDefault true;
   networking.firewall.allowPing = true;
   networking.firewall.allowedTCPPorts = lib.mkDefault [22];
+  # but not too much, don't break VPNs etc
+  networking.firewall.checkReversePath = "loose";
 
   programs.fish.enable = lib.mkDefault true;
   users.defaultUserShell = lib.mkOverride 900 pkgs.fish;
diff --git a/home-manager/common.nix b/home-manager/common.nix
index cbe5098..85c8bba 100644
--- a/home-manager/common.nix
+++ b/home-manager/common.nix
@@ -89,6 +89,8 @@ inputs: all: {
       };
     });
 
+    nativeMessagingHosts.fxcast = true;
+
     profiles.default = {
       extensions = lib.optionals (pkgs ? nur.repos.rycee.firefox-addons) (with pkgs.nur.repos.rycee.firefox-addons; [
         darkreader