diff --git a/roles/base/templates/iptables/iptables b/roles/base/templates/iptables/iptables
index ab4f4fe081..b084d1902c 100644
--- a/roles/base/templates/iptables/iptables
+++ b/roles/base/templates/iptables/iptables
@@ -116,8 +116,8 @@ COMMIT
 
 {% if nat_rules %}
 *nat
-:PREROUTING ACCEPT [0:]
-:INPUT ACCEPT [0:]
+:PREROUTING ACCEPT [0:0]
+:INPUT ACCEPT [0:0]
 :OUTPUT ACCEPT [0:0]
 :POSTROUTING ACCEPT [0:0]