diff --git a/src/master/dbscripts/build_fwup_sets.pl b/src/master/dbscripts/build_fwup_sets.pl
index 421a4f4759ffd9635ac21a53ed45edad62079631..4a9b65717a765adf94405bb97fe5040789029bcd 100755
--- a/src/master/dbscripts/build_fwup_sets.pl
+++ b/src/master/dbscripts/build_fwup_sets.pl
@@ -62,3 +62,8 @@ fake_set_generate 'turris_100FA4E0_lb_a_6_X', 6, 'hard';
 $dbh->do("UPDATE config SET value = ? WHERE plugin = 'fwup' AND name = 'version'", undef, $version) if $bump_config_version;
 
 $dbh->commit;
+
+# TODO: Solve the problem of propagating the size to the firewall rules somehow
+# Currently, if the sizes don't match, ucollect can't create the set. While we can switch
+# sets of different sizes, ipset -exist create complains.
+die "I had to update the sizes, please propagate them to the firewall rules.\n" if $bump_config_version;