diff --git a/firewall/master.go b/firewall/master.go
index d6daf61a..c3d33001 100644
--- a/firewall/master.go
+++ b/firewall/master.go
@@ -44,9 +44,9 @@ var deciders = []deciderFn{
 	checkPortmasterConnection,
 	checkSelfCommunication,
 	checkConnectionType,
-	checkConnectivityDomain,
 	checkConnectionScope,
 	checkEndpointLists,
+	checkConnectivityDomain,
 	checkBypassPrevention,
 	checkFilterLists,
 	dropInbound,