diff --git a/shadowsocks-libev/files/firewall.ss-rules b/shadowsocks-libev/files/firewall.ss-rules
index 3134150d8..5c8336a83 100644
--- a/shadowsocks-libev/files/firewall.ss-rules
+++ b/shadowsocks-libev/files/firewall.ss-rules
@@ -1,2 +1,2 @@
 #!/bin/sh
-/etc/init.d/shadowsocks-libev rules_up
+[ "$(uci -q get shadowsocks-libev.sss0.disabled)" != "1" ] && /etc/init.d/shadowsocks-libev rules_up
diff --git a/shadowsocks-rust/files/firewall.ssr-rules b/shadowsocks-rust/files/firewall.ssr-rules
index 87e4769b6..c5e7aa863 100644
--- a/shadowsocks-rust/files/firewall.ssr-rules
+++ b/shadowsocks-rust/files/firewall.ssr-rules
@@ -1,2 +1,2 @@
 #!/bin/sh
-/etc/init.d/shadowsocks-rust rules_up
+[ "$(uci -q get shadowsocks-rust.sss0.disabled)" != "1" ] && /etc/init.d/shadowsocks-rust rules_up
diff --git a/v2ray-core/files/etc/firewall.v2ray-rules b/v2ray-core/files/etc/firewall.v2ray-rules
index 2c0ade3dd..a76fa56c0 100644
--- a/v2ray-core/files/etc/firewall.v2ray-rules
+++ b/v2ray-core/files/etc/firewall.v2ray-rules
@@ -1,2 +1,2 @@
 #!/bin/sh
-/etc/init.d/v2ray rules_up
+[ "$(uci -q get v2ray.main_dns.enabled)" = "1" ] && /etc/init.d/v2ray rules_up
diff --git a/xray-core/files/etc/firewall.xray-rules b/xray-core/files/etc/firewall.xray-rules
index 2aac68055..064828b3b 100644
--- a/xray-core/files/etc/firewall.xray-rules
+++ b/xray-core/files/etc/firewall.xray-rules
@@ -1,2 +1,2 @@
 #!/bin/sh
-/etc/init.d/xray rules_up
+[ "$(uci -q get xray.main_dns.enabled)" = "1"] && /etc/init.d/xray rules_up