diff --git a/etc/inc/config.inc b/etc/inc/config.inc
index 223b73b627..5f037784a8 100644
--- a/etc/inc/config.inc
+++ b/etc/inc/config.inc
@@ -937,10 +937,12 @@ function convert_config() {
 	/* Convert 2.7 -> 2.8 */
 	if ($config['version'] <= 2.7) {
 		$rule_item = array();
+		$a_filter = &$config['filter']['rule'];
 		$rule_item['interface'] = "IPSEC";
 		$rule_item['type'] = "pass";
 		$rule_item['src'] = "any";
 		$rule_item['dst'] = "any";
+		$a_filter[] = $rule_item;
 		$config['version'] = "2.8";
 	}