diff --git a/README.md b/README.md
index 496f555..a7ea991 100644
--- a/README.md
+++ b/README.md
@@ -21,8 +21,8 @@ blocking_tcp="{ 21 23 53 111 135 137:139 445 1433 25565 5432 3389 3306 27019 }"
 
 table <blocked> persist
 
-pass in quick on egress proto tcp to port $blocking_tcp rdr-to 127.0.0.1 port 666
 block in quick from <blocked> label iblock
+pass in quick on egress proto tcp to port $blocking_tcp rdr-to 127.0.0.1 port 666
 ```
 
 Done! You can see IP banned using `pfctl -t blocked -T show` and iBlock will log blocking too.