diff --git a/src/vnm_mad/remotes/lib/security_groups_iptables.rb b/src/vnm_mad/remotes/lib/security_groups_iptables.rb
index 7ad36e0282..2c9bf3027a 100644
--- a/src/vnm_mad/remotes/lib/security_groups_iptables.rb
+++ b/src/vnm_mad/remotes/lib/security_groups_iptables.rb
@@ -95,7 +95,7 @@ module SGIPTables
 
             cmds.add :ipset, "create #{set} hash:net,port"
             cmds.add :iptables, "-A #{chain} -m set --match-set" \
-                "#{set} #{dir} -j RETURN"
+                " #{set} #{dir} -j RETURN"
 
             net.each do |n|
                 @range.split(",").each do |r|