diff --git a/mysql-oracle/handlers/main.yml b/mysql-oracle/handlers/main.yml
index 80375330..7571ebc5 100644
--- a/mysql-oracle/handlers/main.yml
+++ b/mysql-oracle/handlers/main.yml
@@ -17,3 +17,5 @@
 - name: reload systemd
   command: systemctl daemon-reload
 
+- name: Restart minifirewall
+  command: /etc/init.d/minifirewall restart
diff --git a/mysql-oracle/tasks/packages.yml b/mysql-oracle/tasks/packages.yml
index 477f9bef..76128f59 100644
--- a/mysql-oracle/tasks/packages.yml
+++ b/mysql-oracle/tasks/packages.yml
@@ -14,6 +14,15 @@
     state: installed
   register: mysql_apt_config_deb
 
+- name: Open firewall for MySQL.com repository
+  replace:
+    name: /etc/default/minifirewall
+    regexp: "^(HTTPSITES='((?!(repo\\.mysql\\.com|0\\.0\\.0\\.0)).)*)'$"
+    replace: "\\1 repo.mysql.com'"
+  notify: Restart minifirewall
+
+- meta: flush_handlers
+
 - name: APT cache is up-to-date
   apt:
     update_cache: yes