diff --git a/root/etc/e-smith/templates/etc/rc.d/init.d/masq/90adjustFail2Ban b/root/etc/e-smith/templates/etc/rc.d/init.d/masq/90adjustFail2Ban
index 7657930..039a0db 100644
--- a/root/etc/e-smith/templates/etc/rc.d/init.d/masq/90adjustFail2Ban
+++ b/root/etc/e-smith/templates/etc/rc.d/init.d/masq/90adjustFail2Ban
@@ -16,9 +16,9 @@ EOF
             $OUT .= " -p $proto" if ($proto =~ m/^tcp|udp|icmp$/);
             $OUT .= " -m multiport --dports $port" if ($proto =~ m/^tcp|udp$/ && $port =~ m/^\d+(,\d+)*$/);
             $OUT .= " -j denylog\n";
-            $OUT .= "    /sbin/iptables --append  \$NEW_Fail2Ban" .
-                    " -j RETURN\n";
         }
+        $OUT .= "    /sbin/iptables --append  \$NEW_Fail2Ban" .
+                " -j RETURN\n";
     }
 
     # Having created a new Fail2Ban chain, activate it and destroy the old.