diff --git a/config/action.d/nftables-common.conf b/config/action.d/nftables-common.conf
index 534eec2f..157f3c77 100644
--- a/config/action.d/nftables-common.conf
+++ b/config/action.d/nftables-common.conf
@@ -22,13 +22,13 @@ after = nftables-common.local
 # Notes.:  additional expressions for nftables filter rule
 # Values:  nftables expressions
 #
-nftables_mode = <protocol> dport { <port> }
+nftables_mode = <protocol> dport \{ <port> \}
 
 # Option:  actionstart
 # Notes.:  command executed once at the start of Fail2Ban.
 # Values:  CMD
 #
-actionstart = <nftables> add set filter f2b-<name> { type ipv4_addr\; }
+actionstart = <nftables> add set filter f2b-<name> \{ type ipv4_addr\; \}
               <nftables> insert rule filter <chain> %(nftables_mode)s ip saddr @f2b-<name> <blocktype>
 
 # Option:  actionstop
@@ -50,7 +50,7 @@ actioncheck = <nftables> list chain filter <chain> | grep -q '@f2b-<name>[ \t]'
 # Tags:    See jail.conf(5) man page
 # Values:  CMD
 #
-actionban = <nftables> add element filter f2b-<name> { <ip> }
+actionban = <nftables> add element filter f2b-<name> \{ <ip> \}
 
 # Option:  actionunban
 # Notes.:  command executed when unbanning an IP. Take care that the
@@ -58,7 +58,7 @@ actionban = <nftables> add element filter f2b-<name> { <ip> }
 # Tags:    See jail.conf(5) man page
 # Values:  CMD
 #
-actionunban = <nftables> delete element filter f2b-<name> { <ip> }
+actionunban = <nftables> delete element filter f2b-<name> \{ <ip> \}
 
 [Init]
 
diff --git a/config/action.d/nftables-multiport.conf b/config/action.d/nftables-multiport.conf
index 3c6455e2..d1afafb3 100644
--- a/config/action.d/nftables-multiport.conf
+++ b/config/action.d/nftables-multiport.conf
@@ -17,6 +17,6 @@ before = nftables-common.conf
 # Notes.:  additional expressions for nftables filter rule
 # Values:  nftables expressions
 #
-nftables_mode = <protocol> dport { <port> }
+nftables_mode = <protocol> dport \{ <port> \}
 
 [Init]