diff --git a/etc/inc/filter.inc b/etc/inc/filter.inc
index bea91f7a09..f594bd9325 100644
--- a/etc/inc/filter.inc
+++ b/etc/inc/filter.inc
@@ -939,14 +939,12 @@ function filter_nat_rules_generate() {
 		}
 	} else {
 		/* standard outbound rules (one for each interface) */
-
+		$lansa = find_interface_ip($config['interfaces']['lan']['if']);
 		/* create ipsec passthru rule if requested */
 		if (isset($config['nat']['ipsecpassthru']['enable'])) {
 			$natrules .= filter_nat_rules_generate_if($wanif,
 				$lansa . "/" . $lancfg['subnet'], 500, "", 500, null, "");
 		}
-		
-		$lansa = find_interface_ip($config['interfaces']['lan']['if']);
 		$natrules .= filter_nat_rules_generate_if($wanif,
 			$lansa . "/" . $lancfg['subnet'], null, "", null, null, "");