diff --git a/package/firewall/Makefile b/package/firewall/Makefile
index 50b916a581..b14de08095 100644
--- a/package/firewall/Makefile
+++ b/package/firewall/Makefile
@@ -9,7 +9,7 @@ include $(TOPDIR)/rules.mk
 PKG_NAME:=firewall
 
 PKG_VERSION:=2
-PKG_RELEASE:=29
+PKG_RELEASE:=30
 
 include $(INCLUDE_DIR)/package.mk
 
diff --git a/package/firewall/files/lib/core_redirect.sh b/package/firewall/files/lib/core_redirect.sh
index e8d5ceab03..a3e70d40d7 100644
--- a/package/firewall/files/lib/core_redirect.sh
+++ b/package/firewall/files/lib/core_redirect.sh
@@ -109,7 +109,7 @@ fw_load_redirect() {
 				$srcaddr ${destaddr:--m conntrack --ctstate DNAT} \
 				$pr \
 				$srcports $destports \
-				$sm \
+				${sm:+-m mac $sm} \
 				$redirect_extra \
 			}
 		done