diff --git a/client/internal/acl/manager_create_linux.go b/client/internal/acl/manager_create_linux.go
index 1c3767397..536f1ce4d 100644
--- a/client/internal/acl/manager_create_linux.go
+++ b/client/internal/acl/manager_create_linux.go
@@ -19,11 +19,11 @@ func Create(iface iFaceMapper) (manager *DefaultManager, err error) {
 			return nil, err
 		}
 	} else {
-		if fm, err = iptables.Create(iface.Name()); err != nil {
-			log.Debugf("failed to create iptables manager: %s", err)
-			// fallback to nftables
-			if fm, err = nftables.Create(iface.Name()); err != nil {
-				log.Errorf("failed to create nftables manager: %s", err)
+		if fm, err = nftables.Create(iface.Name()); err != nil {
+			log.Debugf("failed to create nftables manager: %s", err)
+			// fallback to iptables
+			if fm, err = iptables.Create(iface.Name()); err != nil {
+				log.Errorf("failed to create iptables manager: %s", err)
 				return nil, err
 			}
 		}