diff --git a/etc/inc/filter.inc b/etc/inc/filter.inc
index 55c29ce474..901f7d93a7 100644
--- a/etc/inc/filter.inc
+++ b/etc/inc/filter.inc
@@ -298,9 +298,6 @@ function filter_configure_sync($delete_states_if_needed = true) {
 
 	$rules .= discover_pkg_rules("filter");
 
-	@file_put_contents("{$g['tmp_path']}/rules.limits", $limitrules);
-	mwexec("/sbin/pfctl -f {$g['tmp_path']}/rules.limits");
-
 	if (!@file_put_contents("{$g['tmp_path']}/rules.debug", $rules, LOCK_EX)) {
 		log_error("WARNING: Could not write new rules!");
 		unlock($filterlck);
@@ -308,12 +305,15 @@ function filter_configure_sync($delete_states_if_needed = true) {
 	}
 
 	unset($rules, $limitrules);
+	unset($rules_loading, $rules_error);
+
+	@file_put_contents("{$g['tmp_path']}/rules.limits", $limitrules);
+	mwexec("/sbin/pfctl -f {$g['tmp_path']}/rules.limits");
 
 	if(isset($config['system']['developerspew'])) {
 		$mt = microtime();
 		echo "pfctl being called at $mt\n";
 	}
-	unset($rules_loading, $rules_error);
 	$_grbg = exec("/sbin/pfctl -o basic -f {$g['tmp_path']}/rules.debug 2>&1", $rules_error, $rules_loading);
 	if(isset($config['system']['developerspew'])) {
 		$mt = microtime();