diff --git a/ard.pl b/ard.pl
index d80a0b8..70590aa 100755
--- a/ard.pl
+++ b/ard.pl
@@ -140,6 +140,7 @@ sub http_child {
 			} elsif ($token eq 'protect') {
 				my $protect = qx(pfctl -t protected -T add $client_ip 2>&1);
 				chomp $protect;
+				qx(pfctl -t protected -T show > /etc/pf.protected);
 
 				_log("$client_ip $token $protect");
 				_http_response($c, {content_type => 'text/plain'}, "Received [$client_ip -> protect] $protect");