immediately afterwards before bringing the interface up. This avoids a small security gap existing in the previous scheme where IP Filter was synced after all cloning interfaces were created and brought up.