diff --git a/roles/configure/tasks/iptables.yaml b/roles/configure/tasks/iptables.yaml
index b5e3868..4be9837 100644
--- a/roles/configure/tasks/iptables.yaml
+++ b/roles/configure/tasks/iptables.yaml
@@ -140,7 +140,7 @@
     out_interface: "{{ lte_int.stdout }}"
     jump: ACCEPT
     action: insert
-    rule_num: 4 
+    rule_num: 3 
 
 - name: Enable masquerading for {{ lte_int.stdout }}
   iptables: