diff --git a/usr/local/www/firewall_rules_edit.php b/usr/local/www/firewall_rules_edit.php
index f61228eb77..55a2eebd83 100755
--- a/usr/local/www/firewall_rules_edit.php
+++ b/usr/local/www/firewall_rules_edit.php
@@ -282,6 +282,7 @@ if ($_POST) {
                         $filterent['log'] = true;
                 else
                         unset($filterent['log']);
+		/* XXX: enforce 63 char max length server side, client-side is already done */
 		$filterent['descr'] = $_POST['descr'];
 
 		if ($_POST['gateway'] != "") {
@@ -723,7 +724,7 @@ Hint: the difference between block and reject is that with reject, a packet (TCP
                 <tr>
                   <td width="22%" valign="top" class="vncell">Description</td>
                   <td width="78%" class="vtable">
-                    <input name="descr" type="text" class="formfld" id="descr" size="40" value="<?=htmlspecialchars($pconfig['descr']);?>">
+                    <input name="descr" type="text" class="formfld" id="descr" size="63" maxlength="63" value="<?=htmlspecialchars($pconfig['descr']);?>">
                     <br> <span class="vexpl">You may enter a description here
                     for your reference (not parsed).</span></td>
                 </tr>