diff --git a/configuration/kresd.conf b/configuration/kresd.conf
index 121369d..dc1a53e 100644
--- a/configuration/kresd.conf
+++ b/configuration/kresd.conf
@@ -20,6 +20,7 @@ cache.size = 100 * MB
 
 -- policy help : https://knot-resolver.readthedocs.io/en/stable/modules-policy.html
 -- This is Just a Blocklist
+policy.add(policy.rpz(policy.PASS, '/etc/knot-resolver/list/allowlist.rpz',true))
 policy.add(policy.rpz(policy.REFUSE, '/etc/knot-resolver/list/energized-ultimate.rpz',true))
 policy.add(policy.rpz(policy.REFUSE, '/etc/knot-resolver/list/denylist.rpz',true))
 policy.add(policy.rpz(policy.REFUSE, '/etc/knot-resolver/list/oisd.rpz',true))
@@ -29,5 +30,3 @@ policy.add(policy.rpz(policy.REFUSE, '/etc/knot-resolver/list/energized-regional
 policy.add(policy.rpz(policy.REFUSE, '/etc/knot-resolver/list/urlhaus-abuse_ch.rpz',true))
 policy.add(policy.rpz(policy.REFUSE, '/etc/knot-resolver/list/energized-xtreme.rpz',true))
 policy.add(policy.rpz(policy.REFUSE, '/etc/knot-resolver/list/blahdns.rpz',true))
-policy.add(policy.rpz(policy.PASS, '/etc/knot-resolver/list/allowlist.rpz',true))
-policy.add(policy.all(policy.QTRACE))