diff --git a/CHANGELOG.md b/CHANGELOG.md
index 379c0c10..9d1ca0d5 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -24,7 +24,7 @@ The **patch** part changes is incremented if multiple releases happen the same m
 * generate-ldif: Add services check for bkctld
 * minifirewall: restore "force-restart" and fix "restart-if-needed"
 * minifirewall: tail template follows symlinks
-* minifirewall: upstream release 22.03.4
+* minifirewall: upstream release 22.03.5
 * openvpn: use a subnet topology instead of the net30 default topology
 
 ### Fixed
diff --git a/minifirewall/files/minifirewall b/minifirewall/files/minifirewall
index cb707673..f8729f79 100755
--- a/minifirewall/files/minifirewall
+++ b/minifirewall/files/minifirewall
@@ -28,7 +28,7 @@
 # Description:       Firewall designed for standalone server
 ### END INIT INFO
 
-VERSION="22.03.4"
+VERSION="22.03.5"
 
 NAME="minifirewall"
 # shellcheck disable=SC2034
@@ -251,7 +251,7 @@ start() {
 
     if [ "${SYSCTL_ACCEPT_SOURCE_ROUTE}" = "1" ] || [ "${SYSCTL_ACCEPT_SOURCE_ROUTE}" = "0" ]; then
         for proc_sys_file in /proc/sys/net/ipv4/conf/*/accept_source_route; do
-            echo "${SYSCTL_ACCEPT_SOURCE_ROUTE}" = > "${proc_sys_file}"
+            echo "${SYSCTL_ACCEPT_SOURCE_ROUTE}" > "${proc_sys_file}"
         done
     else
         echo "Invalid SYSCTL_ACCEPT_SOURCE_ROUTE value '${SYSCTL_ACCEPT_SOURCE_ROUTE}', must be '0' or '1'." >&2