diff --git a/firewall/interception.go b/firewall/interception.go
index cc4c3bde..98d039b6 100644
--- a/firewall/interception.go
+++ b/firewall/interception.go
@@ -221,8 +221,8 @@ func getConnection(pkt packet.Packet) (*network.Connection, error) {
 		// Else create new one from the packet.
 		conn = network.NewConnectionFromFirstPacket(pkt)
 		conn.Lock()
+		defer conn.Unlock()
 		conn.SetFirewallHandler(initialHandler)
-		conn.Unlock()
 		created = true
 		return conn, nil
 	})