diff --git a/Lrp2/etc/shorewall/rules b/Lrp2/etc/shorewall/rules
index 3a003ce05..3ac2c2d8c 100644
--- a/Lrp2/etc/shorewall/rules
+++ b/Lrp2/etc/shorewall/rules
@@ -320,9 +320,8 @@ ACCEPT          fw              net             icmp    8
 # Bering specific rules:
 # allow loc to fw udp/53 for local/caching DNS servers to work
 # allow loc to fw tcp/80 for weblet to work
-#
+# allow loc to fw udp/67 and udp/68 for dnsmasq's dhcpd to work
 ACCEPT          loc       fw            udp     53
 ACCEPT          loc       fw            tcp     80
-# allow loc to fw udp/67 and udp/68 for dnsmasq's dhcpd to work
 ACCEPT          loc       fw            udp     67,68
 #LAST LINE -- ADD YOUR ENTRIES BEFORE THIS ONE -- DO NOT REMOVE