diff --git a/Shorewall-common/lib.config b/Shorewall-common/lib.config
index ce315c241..12b0373bb 100644
--- a/Shorewall-common/lib.config
+++ b/Shorewall-common/lib.config
@@ -1797,12 +1797,6 @@ do_initialize() {
     # Restore CONFIG_PATH if the shorewall.conf file cleared it
     #
     ensure_config_path
-    #
-    # Determine the capabilities of the installed iptables/netfilter
-    # We load the kernel modules here to accurately determine
-    # capabilities when module autoloading isn't enabled.
-    #
-    PKTTYPE=$(added_param_value_no PKTTYPE $PKTTYPE)
 
     if [ $PROGRAM = compiler ]; then
 	case "${SHOREWALL_COMPILER:=shell}" in
@@ -1832,6 +1826,13 @@ do_initialize() {
 	    ;;
     esac
 
+    #
+    # Determine the capabilities of the installed iptables/netfilter
+    # We load the kernel modules here to accurately determine
+    # capabilities when module autoloading isn't enabled.
+    #
+    PKTTYPE=$(added_param_value_no PKTTYPE $PKTTYPE)
+
     [ -n "${MODULE_SUFFIX:=o gz ko o.gz ko.gz}" ]
 
     if [ -z "$EXPORT" -a $(id -u) -eq 0 ]; then