diff --git a/init.d/openwrt/firewall.user.beeline b/init.d/openwrt/firewall.user.beeline
index 6ef273e..02d2bb1 100644
--- a/init.d/openwrt/firewall.user.beeline
+++ b/init.d/openwrt/firewall.user.beeline
@@ -1,5 +1,5 @@
 # put it to /etc/firewall.user
 
 # for BEELINE ISP
-iptables -t mangle -D POSTROUTING -p tcp --dport 80 -m set --match-set zapret dst -j NFQUEUE --queue-num 200 --queue-bypass 2>/dev/null
-iptables -t mangle -I POSTROUTING -p tcp --dport 80 -m set --match-set zapret dst -j NFQUEUE --queue-num 200 --queue-bypass
+iptables -t mangle -C POSTROUTING -p tcp --dport 80 -m set --match-set zapret dst -j NFQUEUE --queue-num 200 --queue-bypass ||
+ iptables -t mangle -I POSTROUTING -p tcp --dport 80 -m set --match-set zapret dst -j NFQUEUE --queue-num 200 --queue-bypass
diff --git a/init.d/openwrt/firewall.user.mns b/init.d/openwrt/firewall.user.mns
index 8101d12..162f33e 100644
--- a/init.d/openwrt/firewall.user.mns
+++ b/init.d/openwrt/firewall.user.mns
@@ -1,5 +1,5 @@
 # put it to /etc/firewall.user
 
 # for MNS ISP
-iptables -t raw -D PREROUTING -p tcp --sport 80 --tcp-flags SYN,ACK SYN,ACK -m set --match-set zapret src -j NFQUEUE --queue-num 200 --queue-bypass 2>/dev/null
-iptables -t raw -I PREROUTING -p tcp --sport 80 --tcp-flags SYN,ACK SYN,ACK -m set --match-set zapret src -j NFQUEUE --queue-num 200 --queue-bypass
+iptables -t raw -C PREROUTING -p tcp --sport 80 --tcp-flags SYN,ACK SYN,ACK -m set --match-set zapret src -j NFQUEUE --queue-num 200 --queue-bypass ||
+ iptables -t raw -I PREROUTING -p tcp --sport 80 --tcp-flags SYN,ACK SYN,ACK -m set --match-set zapret src -j NFQUEUE --queue-num 200 --queue-bypass