diff --git a/STABLE/firewall b/STABLE/firewall
index 0cfc2a4ce..beea3f772 100755
--- a/STABLE/firewall
+++ b/STABLE/firewall
@@ -1536,7 +1536,7 @@ add_nat_rule() {
     # Generate nat table rules
 
     if [ "$source" = "$FW" ]; then
-	run_iptables -t nat -A OUTPUT $proto $sports -d addr \
+	run_iptables -t nat -A OUTPUT $proto $sports -d $addr \
 	    $multiport $dports -j $target1
     else
 	chain=`dnat_chain $source`
diff --git a/Shorewall/firewall b/Shorewall/firewall
index 6f402d493..7802817a6 100755
--- a/Shorewall/firewall
+++ b/Shorewall/firewall
@@ -1537,7 +1537,7 @@ add_nat_rule() {
     # Generate nat table rules
 
     if [ "$source" = "$FW" ]; then
-	run_iptables -t nat -A OUTPUT $proto $sports -d addr \
+	run_iptables -t nat -A OUTPUT $proto $sports -d $addr \
 	    $multiport $dports -j $target1
     else
 	chain=`dnat_chain $source`