From 4411cff7590de587c7b0180a0972f0a7251ab85b Mon Sep 17 00:00:00 2001
From: YOUNEVSKY <77975903+younevsky@users.noreply.github.com>
Date: Wed, 25 Feb 2026 10:19:47 +0000
Subject: [PATCH] plugin: reorder rewrite before acl to prevent bypass (#7882)

---
 plugin.cfg | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/plugin.cfg b/plugin.cfg
index 1612a9cec..0d735cef2 100644
--- a/plugin.cfg
+++ b/plugin.cfg
@@ -45,13 +45,13 @@ log:log
 dnstap:dnstap
 local:local
 dns64:dns64
-acl:acl
 any:any
 chaos:chaos
 loadbalance:loadbalance
 tsig:tsig
 cache:cache
 rewrite:rewrite
+acl:acl
 header:header
 dnssec:dnssec
 autopath:autopath