diff --git a/en_US.ISO8859-1/articles/checkpoint/article.sgml b/en_US.ISO8859-1/articles/checkpoint/article.sgml
index 0a100dabb4..00da6419e9 100644
--- a/en_US.ISO8859-1/articles/checkpoint/article.sgml
+++ b/en_US.ISO8859-1/articles/checkpoint/article.sgml
@@ -107,8 +107,8 @@ options         IPSEC_DEBUG</programlisting>
     <para>For instructions on building a custom kernel, refer to the
       <ulink url="http://www.FreeBSD.org/doc/en_US.ISO8859-1/books/handbook/kernelconfig.html">
       FreeBSD handbook</ulink>. Please note that <acronym>IP</acronym>
-      protocol 50 (<acronym>ESP</acronym>) and <acronym>UDP</acronym>
-      port <literal>500</literal> must be open between the Firewall-1
+      protocol&nbsp;50 (<acronym>ESP</acronym>) and <acronym>UDP</acronym>
+      port&nbsp;<literal>500</literal> must be open between the Firewall-1
       host and the FreeBSD <acronym>GW</acronym>.</para>
 
     <para>Also, <application>racoon</application> must be installed to
@@ -191,7 +191,7 @@ Use Perfect Forward Secrecy:    Checked</programlisting>
       optional. Enabling <acronym>PFS</acronym> will add another layer of
       encryption security, but does come at the cost of increased
       <acronym>CPU</acronym> overhead. If <acronym>PFS</acronym> is not
-      used, uncheck the box above and comment out the <literal>pfs_group 1</literal>
+      used, uncheck the box above and comment out the <literal>pfs_group&nbsp;1</literal>
       line from <filename>racoon.conf</filename> on FreeBSD
       <acronym>GW</acronym>. An example <filename>racoon.conf</filename>
       is provided later in this document.</para>