diff --git a/bin/srfirewall b/bin/srfirewall
index 591e6ad..9c8888b 100755
--- a/bin/srfirewall
+++ b/bin/srfirewall
@@ -150,7 +150,7 @@ if [ "${EnableIPv4}" == "yes" ]; then
 	[ "${EnableTrustedv4Hosts}" == "yes" ] && allow_trusted_hosts ipv4
 	[ "${Enablev4MSSClamp}" == "yes" ] && enable_mss_clamp ipv4
 	[ "${DNSClientUsev4ResolvConf}" == "yes" ] && allow_resolvconf_servers ipv4
-	[ "${DNSClientManualv4Servers}" ] && allow_dnsclient_manual ipv4 ${DNSClientManualv4Servers}
+	[ "${DNSClientManualv4Servers}" ] && allow_dnsclient_manual ipv4 "${DNSClientManualv4Servers}"
 fi
 
 # Do IPv6 IPTables Rules
@@ -166,6 +166,6 @@ if [ "${EnableIPv6}" == "yes" ]; then
 	[ "${EnableTrustedv6Hosts}" == "yes" ] && allow_trusted_hosts ipv6
 	[ "${Enablev6MSSClamp}" == "yes" ] && enable_mss_clamp ipv6
 	[ "${DNSClientUsev6ResolvConf}" == "yes" ] && allow_resolvconf_servers ipv6
-	[ "${DNSClientManualv6Servers}" ] && allow_dnsclient_manual ipv6 ${DNSClientManualv6Servers}
+	[ "${DNSClientManualv6Servers}" ] && allow_dnsclient_manual ipv6 "${DNSClientManualv6Servers}"
 fi
 
diff --git a/lib/iptables.inc b/lib/iptables.inc
index 5c3c0e4..f8be683 100644
--- a/lib/iptables.inc
+++ b/lib/iptables.inc
@@ -217,7 +217,7 @@ function allow_dnsclient_manual {
 		ipv4|*) VER_IPTABLES=${IPTABLES}
 				IPVER="4" ;;
 	esac
-	DNS_SERVERS="$2-"
+	DNS_SERVERS="$2"
 	${debug} ${DebugColor} "${FUNCNAME}: loading"
 	for i in ${DNS_SERVERS}; do
 		${debug} ${DebugColor} "${FUNCNAME}: Added ${i} to DNS client trusted list"