diff --git a/ncac/setup.sh b/ncac/setup.sh
index ac65cfa..4eb85a0 100644
--- a/ncac/setup.sh
+++ b/ncac/setup.sh
@@ -281,6 +281,8 @@ setAutoStartNginx(){
 }
 
 updateFirewall(){
+    echo "更新防火墙规则."
+    echo ""
     firewall-cmd --permanent --zone=public --add-port=80/tcp
     firewall-cmd --permanent --zone=public --add-port=3306/tcp
     firewall-cmd --reload
@@ -327,8 +329,6 @@ fi
 
 installNewCAC
 
-updateFirewall
-
 if [ $AUTO_START == 1 ]; then
     setAutoStartCac
 fi
@@ -345,6 +345,8 @@ if [ $NGINX_INS == 1 ]; then
     setAutoStartNginx
 fi
 
+updateFirewall
+
 echo "************[install finished.]安装完成. >>>>>>>>>>>>>"
 echo ""
 sleep 1