diff --git a/LrpN/usr/share/shorewall/firewall b/LrpN/usr/share/shorewall/firewall
index b1238d2aa..ca1a03946 100755
--- a/LrpN/usr/share/shorewall/firewall
+++ b/LrpN/usr/share/shorewall/firewall
@@ -7097,11 +7097,6 @@ do_initialize() {
 
     [ -n "$MODULE_SUFFIX" ] || MODULE_SUFFIX="o gz ko o.gz ko.gz"
     load_kernel_modules
-    determine_capabilities
-
-    [ -z "${STATEDIR}" ] && STATEDIR=/var/state/shorewall
-   
-    [ -d $STATEDIR ] || mkdir -p $STATEDIR
 
     if [ -z "$IPTABLES" ]; then
 	IPTABLES=$(which iptables 2> /dev/null)
@@ -7111,6 +7106,12 @@ do_initialize() {
 	[ -e "$IPTABLES" ] || startup_error "\$IPTABLES=$IPTABLES does not exist or is not executable"
     fi
 
+    determine_capabilities
+
+    [ -z "${STATEDIR}" ] && STATEDIR=/var/state/shorewall
+   
+    [ -d $STATEDIR ] || mkdir -p $STATEDIR
+
     [ -z "$FW" ] && FW=fw
 
     ALLOWRELATED="$(added_param_value_yes ALLOWRELATED $ALLOWRELATED)"
diff --git a/Shorewall2/firewall b/Shorewall2/firewall
index b1238d2aa..ca1a03946 100755
--- a/Shorewall2/firewall
+++ b/Shorewall2/firewall
@@ -7097,11 +7097,6 @@ do_initialize() {
 
     [ -n "$MODULE_SUFFIX" ] || MODULE_SUFFIX="o gz ko o.gz ko.gz"
     load_kernel_modules
-    determine_capabilities
-
-    [ -z "${STATEDIR}" ] && STATEDIR=/var/state/shorewall
-   
-    [ -d $STATEDIR ] || mkdir -p $STATEDIR
 
     if [ -z "$IPTABLES" ]; then
 	IPTABLES=$(which iptables 2> /dev/null)
@@ -7111,6 +7106,12 @@ do_initialize() {
 	[ -e "$IPTABLES" ] || startup_error "\$IPTABLES=$IPTABLES does not exist or is not executable"
     fi
 
+    determine_capabilities
+
+    [ -z "${STATEDIR}" ] && STATEDIR=/var/state/shorewall
+   
+    [ -d $STATEDIR ] || mkdir -p $STATEDIR
+
     [ -z "$FW" ] && FW=fw
 
     ALLOWRELATED="$(added_param_value_yes ALLOWRELATED $ALLOWRELATED)"