diff --git a/tasks/install.yml b/tasks/install.yml
index 85880af..896f8e3 100644
--- a/tasks/install.yml
+++ b/tasks/install.yml
@@ -25,7 +25,7 @@
       iptables_raw:
         name: allow_cups
         state: present
-        rules: '-A INPUT -m state --state NEW -p tcp --dport {{ cups_nginx_proxy_url | urlsplit("port") }} -j ACCEPT'
+        rules: 'A INPUT -m state --state NEW -p tcp --dport {{ cups_nginx_proxy_url | urlsplit("port") }} -j ACCEPT'
       when: cups_iptables_enabled
   become: True
   become_user: root