diff --git a/src/initscripts/system/firewall b/src/initscripts/system/firewall
index 7dbbe38cb..ab4833a7f 100644
--- a/src/initscripts/system/firewall
+++ b/src/initscripts/system/firewall
@@ -378,7 +378,7 @@ iptables_init() {
 	# IPS (Suricata) chains
 	iptables -t mangle -N IPS
 
-	for chain in PREROUTING POSTROUTING; do
+	for chain in INPUT FORWARD OUTPUT; do
 		iptables -t mangle -A "${chain}" -j IPS
 	done