diff --git a/logic/gateway.go b/logic/gateway.go
index 1a837a26..6b01de6f 100644
--- a/logic/gateway.go
+++ b/logic/gateway.go
@@ -317,7 +317,7 @@ func firewallNFTCommandsCreateEgress(networkInterface string, gatewayInterface s
 		postUp += "nft add chain nat POSTROUTING ; "
 		postUp += "nft add rule ip nat POSTROUTING oifname " + gatewayInterface + " counter masquerade ; "
 
-		postDown += "nft flush table nat; "
+		postDown += "nft flush table nat ; "
 	}
 
 	return postUp, postDown
diff --git a/netclient/wireguard/common.go b/netclient/wireguard/common.go
index 65184a58..cc4d7924 100644
--- a/netclient/wireguard/common.go
+++ b/netclient/wireguard/common.go
@@ -474,7 +474,7 @@ func UpdateWgInterface(file, privateKey, nameserver string, node models.Node) er
 		}
 	}
 	if node.PostDown != "" {
-		parts := strings.Split(node.PostDown, ";")
+		parts := strings.Split(node.PostDown, " ; ")
 		for i, part := range parts {
 			if i == 0 {
 				wireguard.Section(section_interface).Key("PostDown").SetValue(part)