diff --git a/en_US.ISO8859-1/books/handbook/advanced-networking/chapter.sgml b/en_US.ISO8859-1/books/handbook/advanced-networking/chapter.sgml
index 235cb2d4f9..66596e1ff1 100644
--- a/en_US.ISO8859-1/books/handbook/advanced-networking/chapter.sgml
+++ b/en_US.ISO8859-1/books/handbook/advanced-networking/chapter.sgml
@@ -5460,15 +5460,20 @@ driftfile /var/db/ntp.drift</programlisting>
 	  machines can access your server.</para>
 
 	<para>If you want to deny all machines from accessing your NTP
-	  server, add the line <programlisting>restrict default
-	  ignore</programlisting> to
-	  <filename>/etc/ntp.conf</filename>.  If you only want to
+	  server, add the following line to
+	  <filename>/etc/ntp.conf</filename></para>
+
+        <programlisting>restrict default ignore</programlisting>
+
+        <para>If you only want to
 	  allow machines within your own network to synchronize their
 	  clocks with your server, but ensure they are not allowed to
 	  configure the server or used as peers to synchronize
-	  against, add <programlisting>restrict 192.168.1.0 mask
-	  255.255.255.0 notrust nomodify notrap</programlisting>
-	  instead, where <hostid role="ipaddr">192.168.1.0</hostid> is
+	  against, add</para>
+
+        <programlisting>restrict 192.168.1.0 mask 255.255.255.0 notrust nomodify notrap</programlisting>
+
+	<para>instead, where <hostid role="ipaddr">192.168.1.0</hostid> is
 	  an IP address on your network and <hostid
 	  role="netmask">255.255.255.0</hostid> is your network's
 	  netmask.</para>