diff --git a/qvm-tools/qvm-firewall b/qvm-tools/qvm-firewall
index 6a959eed..51337f62 100755
--- a/qvm-tools/qvm-firewall
+++ b/qvm-tools/qvm-firewall
@@ -308,11 +308,11 @@ def main():
 
     if changed:
         vm.write_firewall_conf(conf)
+        qvm_collection.save()
     if changed or options.reload:
         if vm.is_running():
             if vm.netvm is not None and vm.netvm.is_proxyvm():
                 vm.netvm.write_iptables_qubesdb_entry()
-        qvm_collection.save()
 
     if not options.do_list:
         qvm_collection.unlock_db()