diff --git a/manpages/shorewall-tcrules.xml b/manpages/shorewall-tcrules.xml
index 68b0d718c..41ede0033 100644
--- a/manpages/shorewall-tcrules.xml
+++ b/manpages/shorewall-tcrules.xml
@@ -32,8 +32,8 @@
       matches.</para>
 
       <para>If you use multiple internet providers with the 'track' option, in
-      /etc/shorewall/providers be sure to read the restrictions at
-      http://shorewall.net/MultiISP.html.</para>
+      /etc/shorewall/providers be sure to read the restrictions at <ulink
+      url="http://shorewall.net/MultiISP.html">http://shorewall.net/MultiISP.html</ulink>.</para>
     </important>
 
     <para>The columns in the file are as follows.</para>
@@ -70,12 +70,14 @@
               in your kernel and iptables; neither may be used with connection
               marks (see below).</para>
 
-              <para>If HIGH_ROUTE_MARKS=Yes in shorewall.conf then you may
+              <para>If HIGH_ROUTE_MARKS=Yes in <ulink
+              url="shorewall.conf.html">shorewall.conf</ulink>(5) then you may
               also specify a value in the range 0x0100-0xFF00 with the
               low-order byte being zero. Such values may only be used in the
               PREROUTING chain(value followed by <emphasis
               role="bold">:F</emphasis> or you have set
-              MARK_IN_FORWARD_CHAIN=Yes in shorewall conf and have not
+              MARK_IN_FORWARD_CHAIN=Yes in <ulink
+              url="shorewall.conf.html">shorewall.conf</ulink>(5) and have not
               followed the value with :P) or the OUTPUT chain (SOURCE is
               <emphasis role="bold">$FW</emphasis>).</para>