diff --git a/firewall/master.go b/firewall/master.go
index 9ba97ced..abe9d017 100644
--- a/firewall/master.go
+++ b/firewall/master.go
@@ -51,8 +51,8 @@ var defaultDeciders = []deciderFn{
 	checkResolverScope,
 	checkConnectivityDomain,
 	checkBypassPrevention,
-	checkCustomFilterList,
 	checkFilterLists,
+	checkCustomFilterList,
 	dropInbound,
 	checkDomainHeuristics,
 	checkAutoPermitRelated,