diff --git a/Shorewall-docs/FAQ.xml b/Shorewall-docs/FAQ.xml
index 52b175252..ba210071f 100644
--- a/Shorewall-docs/FAQ.xml
+++ b/Shorewall-docs/FAQ.xml
@@ -1829,8 +1829,7 @@
Add this command to your /etc/shorewall/start file:
- run_iptables -D OUTPUT -p ! icmp -m state --state
- INVALID -j DROP
+ run_iptables -D OUTPUT -p ! icmp -m state --state INVALID -j DROP
@@ -1857,4 +1856,4 @@
2 Bridging".
-
\ No newline at end of file
+