diff --git a/pkgs/firewallgen/default.nix b/pkgs/firewallgen/default.nix
index a1793d32..246f8be7 100644
--- a/pkgs/firewallgen/default.nix
+++ b/pkgs/firewallgen/default.nix
@@ -53,7 +53,7 @@ let
       ({ family, ... } : family)
       (mapAttrsToList (n : v : v // { name = n; }) chains);
 in writeScript name ''
-#!${nftables}/sbin/nft -cf
+#!${nftables}/sbin/nft -f
 
 flush ruleset