diff --git a/STABLE/changelog.txt b/STABLE/changelog.txt
index 9e203511e..4d85fe9cb 100644
--- a/STABLE/changelog.txt
+++ b/STABLE/changelog.txt
@@ -54,3 +54,5 @@ Changes since 1.4.5
 
 23. Move determine_capabilities call to do_initialize to ensure that
     MANGLE_ENABLED is set before it is tested.
+
+24. Fixed MAC address handling in the SOURCE column of tcrules.
diff --git a/STABLE/firewall b/STABLE/firewall
index 4acc9d294..e2faf145d 100755
--- a/STABLE/firewall
+++ b/STABLE/firewall
@@ -1581,7 +1581,7 @@ process_tc_rule()
 		    r="-s $source "
 		    ;;
 		~*)
-		    r=`mac_match $source`
+		    r="`mac_match $source` "
 		    ;;
 		$FW)
 		    chain=tcout
diff --git a/STABLE/releasenotes.txt b/STABLE/releasenotes.txt
index 35b453b83..edae24ba7 100644
--- a/STABLE/releasenotes.txt
+++ b/STABLE/releasenotes.txt
@@ -23,6 +23,10 @@ Problems Corrected:
 6) Corrected problem in 1.4.6 where the MANGLE_ENABLED variable was
    being tested before it was set.
 
+7) Corrected handling of MAC addresses in the SOURCE column of the
+   tcrules file. Previously, these addresses resulted in an invalid
+   iptables command.
+
 Migration Issues:
 
 1) In earlier versions, an undocumented feature allowed entries in