diff --git a/Shorewall2/firewall b/Shorewall2/firewall
index c9080050d..36dc49c5e 100755
--- a/Shorewall2/firewall
+++ b/Shorewall2/firewall
@@ -1078,7 +1078,7 @@ log_rule_limit() # $1 = log level, $2 = chain, $3 = disposition , $4 = rate limi
     local disposition=$3
     local rulenum=
     local limit="${4:-$LOGLIMIT}"
-    local tag=$5
+    local tag=${5:+$5 }
     local prefix
 
     shift;shift;shift;shift;shift
@@ -1088,12 +1088,12 @@ log_rule_limit() # $1 = log level, $2 = chain, $3 = disposition , $4 = rate limi
 
 	[ -z "$rulenum" ] && rulenum=1
 
-	prefix="$(printf "$LOGFORMAT" $chain $rulenum $disposition)${tag:+$tag }"
+	prefix="$(printf "$LOGFORMAT" $chain $rulenum $disposition)${tag}"
 
 	rulenum=$(($rulenum + 1))
 	eval ${chain}_logrules=$rulenum
     else
-	prefix="$(printf "$LOGFORMAT" $chain $disposition)${tag:+$tag }"
+	prefix="$(printf "$LOGFORMAT" $chain $disposition)${tag}"
     fi
 
     if [ ${#prefix} -gt 29 ]; then