diff --git a/src/debian/debian_ts_nftables.conf b/src/debian/debian_ts_nftables.conf
index 5ea0cde..d86cfa8 100644
--- a/src/debian/debian_ts_nftables.conf
+++ b/src/debian/debian_ts_nftables.conf
@@ -91,12 +91,12 @@ table inet router {
         jump accept_from_tailscale
     }
 
-    chain output_tailscale {
+    chain forward_tailscale {
+        jump accept_to_lan comment "tsconf: accept Tailscale to LAN forward"
         jump accept_to_tailscale
     }
 
-    chain forward_tailscale {
-        jump accept_to_lan comment "tsconf: accept Tailscale to LAN forward"
+    chain output_tailscale {
         jump accept_to_tailscale
     }