             dbg("starting firewall -- applying incoming rules")
             if admin_whitelist
                 incoming_whitelist_hosts += ',' + admin_whitelist
+            if storage_whitelist
+                incoming_whitelist_hosts += ',' + storage_whitelist
             firewall
                 command : "incoming"
                 args    : ["--whitelist_hosts", incoming_whitelist_hosts]

                            admin_whitelist = w
                            cb(err)
                (cb) ->
                    dbg('getting whitelisted users')
                    get_whitelisted_users
                        cb  : (err, users) ->

    outgoing_whitelist_hosts = 'sagemath.com'
    whitelisted_users        = ''
    admin_whitelist = ''
    storage_whitelist = ''
    async.series([
        (cb) ->
            async.parallel([
