diff --git a/etc/hexchat.profile b/etc/hexchat.profile
index 8f6fd6217..7978960c8 100644
--- a/etc/hexchat.profile
+++ b/etc/hexchat.profile
@@ -1,5 +1,6 @@
 # HexChat instant messaging profile
 noblacklist ${HOME}/.config/hexchat
+noblacklist /usr/lib/python2*
 include /etc/firejail/disable-common.inc
 include /etc/firejail/disable-programs.inc
 include /etc/firejail/disable-devel.inc
@@ -8,3 +9,8 @@ caps.drop all
 seccomp
 protocol unix,inet,inet6
 noroot
+netfilter
+
+mkdir ~/.config
+mkdir ~/.config/hexchat
+whitelist ~/.config/hexchat