diff --git a/STABLE/firewall b/STABLE/firewall
index 9252e75cd..0cfc2a4ce 100755
--- a/STABLE/firewall
+++ b/STABLE/firewall
@@ -1536,7 +1536,7 @@ add_nat_rule() {
     # Generate nat table rules
 
     if [ "$source" = "$FW" ]; then
-	run_iptables -t nat -A OUTPUT $proto $sports -d addr
+	run_iptables -t nat -A OUTPUT $proto $sports -d addr \
 	    $multiport $dports -j $target1
     else
 	chain=`dnat_chain $source`