diff --git a/package/firewall/Makefile b/package/firewall/Makefile
index 0cfc9c6361..05f42a62ea 100644
--- a/package/firewall/Makefile
+++ b/package/firewall/Makefile
@@ -9,7 +9,7 @@ include $(TOPDIR)/rules.mk
 PKG_NAME:=firewall
 
 PKG_VERSION:=2
-PKG_RELEASE:=52
+PKG_RELEASE:=53
 
 include $(INCLUDE_DIR)/package.mk
 
diff --git a/package/firewall/files/reflection.hotplug b/package/firewall/files/reflection.hotplug
index 2da0be9a05..843c615bcb 100644
--- a/package/firewall/files/reflection.hotplug
+++ b/package/firewall/files/reflection.hotplug
@@ -69,7 +69,7 @@ if [ "$ACTION" = "add" ] && [ "$INTERFACE" = "wan" ]; then
 				config_get proto "$cfg" proto
 
 				local epmin epmax extport
-				config_get extport "$cfg" src_dport
+				config_get extport "$cfg" src_dport "1-65535"
 				[ -n "$extport" ] || return
 
 				epmin="${extport%[-:]*}"; epmax="${extport#*[-:]}"
@@ -88,6 +88,7 @@ if [ "$ACTION" = "add" ] && [ "$INTERFACE" = "wan" ]; then
 				config_get inthost "$cfg" dest_ip
 				[ -n "$inthost" ] || return
 
+				[ "$proto" = all    ] && proto="tcp udp"
 				[ "$proto" = tcpudp ] && proto="tcp udp"
 
 				[ "${inthost#!}" = "$inthost" ] || return 0