minor documentation updates

server/fwknopd.conf

@@ -140,21 +140,21 @@
 # Allow fwknopd to acquire SPA data from HTTP requests (generated with the
 # fwknop client in --HTTP mode).  Note that the PCAP_FILTER variable would
 # need to be updated when this is enabled to sniff traffic over TCP/80
-# connections
+# connections.
 #
 #ENABLE_SPA_OVER_HTTP        N;
 
-# Allow fwknopd to resolve hostnames in NAT access messages
+# Allow fwknopd to resolve hostnames in NAT access messages.
 #ENABLE_NAT_DNS              Y;
 
-# Allows using the X-Forwarded-for header from a captured packet as the
-# Source IP.
+# Allows the use of the X-Forwarded-for header from a captured packet as the
+# Source IP. This can happen when using SPA through an HTTP proxy.
 #
 #ENABLE_X_FORWARDED_FOR      N;
 
 # Instead of appending new firewall rules to the bottom of the chain, this
-# option inserts rules at the top of the chain.  This causes later rules
-# to have precedence over earlier rules.
+# option inserts rules at the top of the chain. This causes newly created
+# rules to have precedence over older ones.
 #
 #ENABLE_RULE_PREPEND         N;