diff --git a/CHANGELOG.md b/CHANGELOG.md
index 7f628094..cab57c5d 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -18,6 +18,7 @@ The **patch** part changes is incremented if multiple releases happen the same m
 * lxc-solr: download URL according to Solr Version
 * lxc-solr: detect the real partition options
 * lxc-solr: set homedir and port at install
+* minifirewall: whitelist deb.freexian.com
 * squid: whitelist deb.freexian.com
 
 ### Fixed
diff --git a/minifirewall/files/minifirewall.legacy.conf b/minifirewall/files/minifirewall.legacy.conf
index 47be78bf..b63ad7d8 100644
--- a/minifirewall/files/minifirewall.legacy.conf
+++ b/minifirewall/files/minifirewall.legacy.conf
@@ -55,7 +55,7 @@ DNSSERVEURS='0.0.0.0/0'
 # HTTP authorizations
 # (you can use DNS names but set cron to reload minifirewall regularly)
 # (if you have HTTP proxy, set 0.0.0.0/0)
-# HTTPSITES='security.debian.org pub.evolix.net security-cdn.debian.org mirror.evolix.org backports.debian.org hwraid.le-vert.net antispam00.evolix.org spamassassin.apache.org sa-update.space-pro.be sa-update.secnap.net www.sa-update.pccc.com sa-update.dnswl.org ocsp.int-x3.letsencrypt.org'
+# HTTPSITES='security.debian.org pub.evolix.net security-cdn.debian.org mirror.evolix.org backports.debian.org hwraid.le-vert.net antispam00.evolix.org spamassassin.apache.org sa-update.space-pro.be sa-update.secnap.net www.sa-update.pccc.com sa-update.dnswl.org ocsp.int-x3.letsencrypt.org deb.freexian.com'
 HTTPSITES='0.0.0.0/0'
 
 # HTTPS authorizations