Tried to limit effects of failures

Switched automatic "up" and "down" processing.

In the case of a general error the "up" will be triggered first. Then
the "down" will be triggered (overwriting the "up"). This leads to a
safer fail state ("down" instead of "up").