diff --git a/src/Propellor/Property/Firewall.hs b/src/Propellor/Property/Firewall.hs
index dd82fcc..6c95a02 100644
--- a/src/Propellor/Property/Firewall.hs
+++ b/src/Propellor/Property/Firewall.hs
@@ -42,14 +42,18 @@ toIpTable r =  map Param $
 	(toIpTableArg (ruleRules r)) ++ [ "-j" , show $ ruleTarget r ]
 
 toIpTableArg :: Rules -> [String]
-toIpTableArg Everything          = []
-toIpTableArg (Proto proto)       = ["-p", map toLower $ show proto]
+toIpTableArg Everything = []
+toIpTableArg (Proto proto) = ["-p", map toLower $ show proto]
 toIpTableArg (DPort (Port port)) = ["--dport", show port]
-toIpTableArg (DPortRange
-	      (Port f, Port t))  = ["--dport", show f ++ ":" ++ show t]
-toIpTableArg (IFace iface)       = ["-i", iface]
-toIpTableArg (Ctstate states)    = ["-m", "conntrack","--ctstate", concat $ intersperse "," (map show states)]
-toIpTableArg (r :- r')           = toIpTableArg r <> toIpTableArg r'
+toIpTableArg (DPortRange (Port f, Port t)) =
+	["--dport", show f ++ ":" ++ show t]
+toIpTableArg (IFace iface) = ["-i", iface]
+toIpTableArg (Ctstate states) =
+	[ "-m"
+	, "conntrack"
+	, "--ctstate", concat $ intersperse "," (map show states)
+	]
+toIpTableArg (r :- r') = toIpTableArg r <> toIpTableArg r'
 
 data Rule = Rule
 	{ ruleChain :: Chain