diff --git a/src/iptlib/NATCompiler_PrintRule.cpp b/src/iptlib/NATCompiler_PrintRule.cpp
index d23dd5d63..f0af8b2ec 100644
--- a/src/iptlib/NATCompiler_PrintRule.cpp
+++ b/src/iptlib/NATCompiler_PrintRule.cpp
@@ -779,7 +779,11 @@ bool NATCompiler_ipt::PrintRule::processNext()
 	    string ports = _printDNATPorts(tsrv);
 	    if (!ports.empty())
             {
-                cmdout << addr_part.trimmed().toStdString()
+                bool ipv6 = tdst->hasInetAddress() && tdst->getAddressPtr()->isV6();
+
+                cmdout << (ipv6 ? "[" : "")
+                       << addr_part.trimmed().toStdString()
+                       << (ipv6 ? "]" : "")
                        << ":" << ports;
             } else
             {