diff --git a/Shorewall/firewall b/Shorewall/firewall
index bed29a459..5579d6250 100755
--- a/Shorewall/firewall
+++ b/Shorewall/firewall
@@ -3657,7 +3657,7 @@ process_tc_rule()
 	    esac
 	fi
 
-	if [ "x{$length:=-}" != "x-" ]; then
+	if [ "x${length:=-}" != "x-" ]; then
 	    [ -n "$LENGTH_MATCH" ] || fatal_error "Your kernel and/or iptables does not have length match support. Rule: \"$rule\""
 	    r="${r}-m length --length ${length} "
 	fi
diff --git a/Shorewall/shorewall b/Shorewall/shorewall
index 5a0d562bb..608fb548d 100755
--- a/Shorewall/shorewall
+++ b/Shorewall/shorewall
@@ -635,6 +635,9 @@ while [ $finished -eq 0 ]; do
     [ $# -eq 0 ] && usage 1
     option=$1
     case $option in
+	-)
+	    finished=1
+	    ;;
 	-*)
 	    option=${option#-}