diff --git a/en_US.ISO8859-1/articles/ipsec-must/article.sgml b/en_US.ISO8859-1/articles/ipsec-must/article.sgml
index a5562b631e..9e2cf64cb7 100644
--- a/en_US.ISO8859-1/articles/ipsec-must/article.sgml
+++ b/en_US.ISO8859-1/articles/ipsec-must/article.sgml
@@ -40,7 +40,7 @@
   <sect1 id="problem">
     <title>The Problem</title>
 
-    <para>First, let's assume you have <link linkend="ipsec-install">
+    <para>First, lets assume you have <link linkend="ipsec-install">
       installed <emphasis>IPsec</emphasis></link>.  How do you know
       it is <link linkend="caveat">working</link>?  Sure, your
       connection will not work if it is misconfigured, and it will work
@@ -55,12 +55,12 @@
 
     <orderedlist>
       <listitem>
-	<para>encrypted data is uniformly distributed, i.e., has maximal
+	<para>Encrypted data is uniformly distributed, i.e., has maximal
 	  entropy per symbol;</para>
       </listitem>
 
       <listitem>
-	<para>raw, uncompressed data is typically redundant, i.e., has
+	<para>Raw, uncompressed data is typically redundant, i.e., has
 	  sub-maximal entropy.</para>
       </listitem>
     </orderedlist>
@@ -69,7 +69,7 @@
       from- your network interface.  Then you could see the difference
       between unencrypted data and encrypted data.  This would be true
       even if some of the data in <quote>encrypted mode</quote> was
-      not encrypted---as the outermost IP header must be, if the
+      not encrypted---as the outermost IP header must be if the
       packet is to be routable.</para>
 
     <sect2 id="MUST">
@@ -94,7 +94,7 @@
 	interface in your <link linkend="kernel">kernel's config
 	file</link>.</para>
 
-      <para>The command</para>
+      <para>The command:</para>
 
       <screen><userinput><command>tcpdump</command> -c 4000 -s 10000 -w <replaceable>dumpfile.bin</replaceable></userinput></screen>
 
@@ -182,7 +182,7 @@ Expected value for L=8 is 7.1836656
     <title>Installing IPsec</title>
 
     <para>Most of the modern versions of FreeBSD have IPsec support
-      in their base source.  So you will probably will need to include
+      in their base source.  So you will need to include the
       <option>IPSEC</option> option in your kernel config and, after
       kernel rebuild and reinstall, configure IPsec connections using
       &man.setkey.8; command.</para>
@@ -197,7 +197,7 @@ Expected value for L=8 is 7.1836656
     <title>src/sys/i386/conf/KERNELNAME</title>
 
     <para>This needs to be present in the kernel config file in order
-      to be able to capture network data with &man.tcpdump.1;.  Be sure
+      to capture network data with &man.tcpdump.1;.  Be sure
       to run &man.config.8; after adding this, and rebuild and
       reinstall.</para>