diff --git a/en_US.ISO8859-1/books/handbook/firewalls/chapter.xml b/en_US.ISO8859-1/books/handbook/firewalls/chapter.xml
index c438c044c6..af6abbf7f9 100644
--- a/en_US.ISO8859-1/books/handbook/firewalls/chapter.xml
+++ b/en_US.ISO8859-1/books/handbook/firewalls/chapter.xml
@@ -2303,7 +2303,7 @@ good_tcpo="22,25,37,53,80,443,110"</programlisting>
 	the destination web server, where a response packet is
 	generated and sent back.  This new packet enters the top of
 	the ruleset.  It matches rule <literal>100</literal> and has
-	it destination <acronym>IP</acronym> address mapped back to
+	its destination <acronym>IP</acronym> address mapped back to
 	the original internal address.  It then is processed by the
 	<literal>check-state</literal> rule, is found in the table as
 	an existing session, and is released to the