diff --git a/usr/local/www/system_advanced_firewall.php b/usr/local/www/system_advanced_firewall.php
index 34bf11de40..816592204a 100644
--- a/usr/local/www/system_advanced_firewall.php
+++ b/usr/local/www/system_advanced_firewall.php
@@ -330,6 +330,17 @@ function update_description(itemnum) {
 									<br/>
 								</td>
 							</tr>
+							<tr>
+								<td width="22%" valign="top" class="vncell">Disable reply-to</td>
+								<td width="78%" class="vtable">
+									<input name="disablereplyto" type="checkbox" id="disablereplyto" value="yes" <?php if ($pconfig['disablereplyto']) echo "checked"; ?> />
+									<strong><?=gettext("Disable reply-to on WAN rules");?></strong>
+									<br />
+									<?=gettext("With Multi-WAN you generally want to ensure traffic leaves the same interface it arrives on, hence reply-to is added automatically by default. " .
+									"When using bridging, you must disable this behavior if the WAN gateway IP is different from the gateway IP of the hosts behind the bridged interface.");?>
+									<br />
+								</td>
+							</tr>
 							<tr>
 								<td colspan="2" class="list" height="12">&nbsp;</td>
 							</tr>
@@ -367,17 +378,6 @@ function update_description(itemnum) {
 									<?=gettext("Currently only applies to 1:1 NAT rules.  Required for full functionality of NAT Reflection for 1:1 NAT.");?>
 								</td>
 							</tr>
- 							<tr>
-                                                                <td width="22%" valign="top" class="vncell">Disable reply-to</td>
-                                                                <td width="78%" class="vtable">
-                                                                        <input name="disablereplyto" type="checkbox" id="disablereplyto" value="yes" <?php if ($pconfig['disablereplyto']) echo "checked"; ?> />
-                                                                        <strong><?=gettext("Disable reply-to on WAN rules");?></strong>
-                                                                        <br />
-                                                                        <?=gettext("With Multi-WAN you generally want to ensure traffic leaves the same interface it arrives on, hence reply-to is added automatically by default." .
-                                                                        "When using bridging, you must disable this behavior if the WAN gateway IP is different from the gateway IP of the hosts behind the bridged interface.");?>
-                                                                        <br />
-                                                                </td>
-                                                        </tr>
 							<tr>
 								<td width="22%" valign="top" class="vncell"><?=gettext("TFTP Proxy");?></td>
 								<td width="78%" class="vtable">