diff --git a/packages/keepalived/Makefile b/packages/keepalived/Makefile
index f7edae2fe..262fa411b 100644
--- a/packages/keepalived/Makefile
+++ b/packages/keepalived/Makefile
@@ -9,7 +9,7 @@ include $(TOPDIR)/rules.mk
 
 PKG_NAME:=keepalived
 PKG_VERSION:=2.3.3
-PKG_RELEASE:=2
+PKG_RELEASE:=3
 
 PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.gz
 PKG_SOURCE_URL:=https://www.keepalived.org/software
diff --git a/packages/keepalived/files/keepalived.init b/packages/keepalived/files/keepalived.init
index 6da5c7282..5c996141c 100644
--- a/packages/keepalived/files/keepalived.init
+++ b/packages/keepalived/files/keepalived.init
@@ -659,7 +659,7 @@ start_service() {
 	[ -f /etc/config/keepalived ] || return 0
 
 	config_load 'keepalived'
-	config_get_bool enabled globals enabled 1
+	config_get_bool enabled globals enabled 0
 	[ "$enabled" = "0" ] && return 0
 
 	process_config
diff --git a/packages/ns-ha/files/500-dhcp-force b/packages/ns-ha/files/500-dhcp-force
index 051cb3a27..486b10799 100644
--- a/packages/ns-ha/files/500-dhcp-force
+++ b/packages/ns-ha/files/500-dhcp-force
@@ -14,7 +14,7 @@ elif [ "$ACTION" == "NOTIFY_BACKUP" ]; then
         uci set dhcp.$section.force='0'
     done
     uci commit dhcp
-else
+elif [ "$ACTION" != "startup" ]; then
     # Sometimes dnsmasq starts when it should not: stop it at every sync and during shutdown
     /etc/init.d/dnsmasq stop 2&>/dev/null
-fi
\ No newline at end of file
+fi