diff --git a/files/firewall b/files/firewall
index b9d3612..cf12068 100755
--- a/files/firewall
+++ b/files/firewall
@@ -101,8 +101,8 @@ case $1 in
         ip6tables -A INPUT -s 2604:bbc0:0:113::1                             -p udp   --sport    53                       -j ACCEPT   # dns replies from bastion
         ip6tables -A INPUT -s 2604:bbc0:0:113::b                             -p tcp   --dport    22                       -j ACCEPT   # ssh from bastion2
         ip6tables -A INPUT -s 2604:bbc0:0:113::b                             -p udp   --sport    53                       -j ACCEPT   # dns replies from bastion2
-        ip6tables -A INPUT -s 2600:1f14:3f:1b01:e296:593a:484a:64d2          -p tcp   --sport    9091                     -j ACCEPT   # prometheus pushgateway
-        ip6tables -A INPUT -s 2600:1f14:3f:1b01:e296:593a:484a:64d2          -p tcp   --sport    9103                     -j ACCEPT   # prometheus collectd-exporter
+        ip6tables -A INPUT -s 2600:1f14:3f:1b01:e296:593a:484a:64d2          -p tcp   --sport  9091                       -j ACCEPT   # prometheus pushgateway
+        ip6tables -A INPUT -s 2600:1f14:3f:1b01:e296:593a:484a:64d2          -p tcp   --sport  9103                       -j ACCEPT   # prometheus collectd-exporter
 
 
        ## traffic we want to see encrypted over the VPN