diff --git a/bin/firewall-sosdg b/bin/firewall-sosdg
index ba4877b..62653a9 100755
--- a/bin/firewall-sosdg
+++ b/bin/firewall-sosdg
@@ -182,7 +182,7 @@ if [ $BLOCKEDIP ]; then
 				FWD) DIRECTION="FORWARD" ;;
 				*) DIRECTION="INPUT" ;;
 			esac
-			${IPTABLES} -A ${DIRECTION} ${SRCIF} ${SRCIP} ${SRCPORT} ${DSTIF} ${DSTIP} ${DSTPORT} ${PROTO} -j DROP
+			${IPTABLES} -A ${DIRECTION} ${PROTO} ${SRCIF} ${SRCIP} ${SRCPORT} ${DSTIF} ${DSTIP} ${DSTPORT} -j DROP
 		else
 			$IPTABLES -A INPUT -s $i -j DROP
 			$IPTABLES -A OUTPUT -d $i -j DROP