svn commit: r44086 - head/en_US.ISO8859-1/books/handbook/firewalls

[Dru Lavigne]

Author: dru
Date: Thu Feb 27 16:55:09 2014
New Revision: 44086
URL: http://svnweb.freebsd.org/changeset/doc/44086

Log:
  Fix some grammos.
  
  Submitted by: bjk
  Sponsored by: iXsystems

Modified:
  head/en_US.ISO8859-1/books/handbook/firewalls/chapter.xml

Modified: head/en_US.ISO8859-1/books/handbook/firewalls/chapter.xml
==============================================================================
--- head/en_US.ISO8859-1/books/handbook/firewalls/chapter.xml	Thu Feb 27 16:40:11 2014	(r44085)
+++ head/en_US.ISO8859-1/books/handbook/firewalls/chapter.xml	Thu Feb 27 16:55:09 2014	(r44086)
@@ -1808,11 +1808,11 @@ options    IPDIVERT			# enables NAT</pro
 	<varlistentry>
 	  <term>RULE_NUMBER</term>
 	  <listitem>
-	    <para>Each rule is associated with a number in the
-	      range of <literal>1</literal> to
+	    <para>Each rule is associated with a number from
+	      <literal>1</literal> to
 	      <literal>65534</literal>.  The number is used to
 	      indicate the order of rule processing.  Multiple rules
-	      can have the same number, in which case they are checked
+	      can have the same number, in which case they are applied
 	      according to the order in which they have been
 	      added.</para>
 	  </listitem>
@@ -1821,8 +1821,8 @@ options    IPDIVERT			# enables NAT</pro
 	<varlistentry>
 	  <term>SET_NUMBER</term>
 	  <listitem>
-	    <para>Each rule is associated with a set number in the
-	      range of <literal>0</literal> to <literal>31</literal>.
+	    <para>Each rule is associated with a set number from
+	      <literal>0</literal> to <literal>31</literal>.
 	      Sets can be individually disabled or enabled, making it
 	      possible to quickly add or delete a set of rules.  If a
 	      SET_NUMBER is not specified, the rule will be added to
@@ -1854,11 +1854,11 @@ options    IPDIVERT			# enables NAT</pro
 	      <literal>limit</literal> rule.</para>
 
 	    <para><parameter>count</parameter>: updates counters for
-	      all packets that match rule.  The search continues with
+	      all packets that match the rule.  The search continues with
 	      the next rule.</para>
 
 	    <para><parameter>deny | drop</parameter>: either word
-	      discards packets that match this rule.</para>
+	      silently discards packets that match this rule.</para>
 
 	    <para>Additional actions are available.  Refer to
 	      &man.ipfw.8; for details.</para>
@@ -1873,7 +1873,7 @@ options    IPDIVERT			# enables NAT</pro
 	      to &man.syslogd.8; with a facility name of
 	      <literal>SECURITY</literal>.  Logging only occurs if the
 	      number of packets logged for that particular rule does
-	      not exceed the optional specified LOG_AMOUNT.  If no
+	      not exceed a specified LOG_AMOUNT.  If no
 	      LOG_AMOUNT is specified, the limit is taken from the
 	      value of
 	      <varname>net.inet.ip.fw.verbose_limit</varname>.  A
@@ -1905,7 +1905,7 @@ options    IPDIVERT			# enables NAT</pro
 	  <listitem>
 	    <para>The <literal>from</literal> keyword must be followed
 	      by the source address or a keyword that represents the
-	      source address.  An address can be represented by the
+	      source address.  An address can be represented by
 	      <literal>any</literal>, <literal>me</literal> (any
 	      address configured on an interface on this system),
 	      <literal>me6</literal>, (any <acronym>IPv6</acronym>