diff --git a/roles/base/templates/iptables/iptables b/roles/base/templates/iptables/iptables
index 7efd6202cc..7a1bb4a925 100644
--- a/roles/base/templates/iptables/iptables
+++ b/roles/base/templates/iptables/iptables
@@ -111,7 +111,7 @@
 -A FORWARD -j REJECT --reject-with icmp-host-prohibited
 COMMIT
 
-{%- if nat_rules %}
+{% if nat_rules %}
 *filter
 :INPUT ACCEPT [0:0]
 :FORWARD ACCEPT [0:0]