diff --git a/core/src/com/cloud/agent/resource/virtualnetwork/VirtualRoutingResource.java b/core/src/com/cloud/agent/resource/virtualnetwork/VirtualRoutingResource.java
index 28d9f97399a..5c68793b8d6 100755
--- a/core/src/com/cloud/agent/resource/virtualnetwork/VirtualRoutingResource.java
+++ b/core/src/com/cloud/agent/resource/virtualnetwork/VirtualRoutingResource.java
@@ -142,6 +142,7 @@ public class VirtualRoutingResource implements Manager {
                 command.add("-r ", rule.getDstIp());
                 command.add("-d ", rule.getStringDstPortRange());
             }
+            result = command.execute();
             results[i++] = (!(result == null || result.isEmpty())) ? "Failed" : null;
         }
 
diff --git a/patches/systemvm/debian/config/root/firewall.sh b/patches/systemvm/debian/config/root/firewall.sh
index 0111973c658..8927c791870 100755
--- a/patches/systemvm/debian/config/root/firewall.sh
+++ b/patches/systemvm/debian/config/root/firewall.sh
@@ -30,6 +30,7 @@ ip_to_dev() {
 #Port (address translation) forwarding for tcp or udp
 tcp_or_udp_entry() {
   local instIp=$1
+  local dport0=$2
   local dport=$(echo $2 | sed 's/:/-/')
   local publicIp=$3
   local port=$4
@@ -54,7 +55,7 @@ tcp_or_udp_entry() {
   (sudo iptables $op FORWARD -p $proto -s 0/0 -d $instIp -m state \
            --state ESTABLISHED,RELATED -j ACCEPT &>>  $OUTFILE || [ "$op" == "-D" ]) &&
   (sudo iptables $op FORWARD -p $proto -s 0/0 -d $instIp  \
-           --destination-port $dport -m state --state NEW  -j ACCEPT &>>  $OUTFILE)
+           --destination-port $dport0 -m state --state NEW  -j ACCEPT &>>  $OUTFILE)
   	
   return $?
 }