diff --git a/Shorewall/Actions/action.allowBcast b/Shorewall/Actions/action.allowBcast
index 9cc8be9b7..b928fb7bc 100644
--- a/Shorewall/Actions/action.allowBcast
+++ b/Shorewall/Actions/action.allowBcast
@@ -28,10 +28,10 @@ DEFAULTS -
 
 ?if passed(@1)
     ?if @1 eq 'audit'
-        ?require AUDIT_TARGET
+	?require AUDIT_TARGET
 	Broadcast(A_ACCEPT)
     ?else
-        ?error "Invalid argument (@1) to allowBcast"
+	?error "Invalid argument (@1) to allowBcast"
     ?endif
 ?else
     Broadcast(ACCEPT)
diff --git a/Shorewall/Actions/action.allowMcast b/Shorewall/Actions/action.allowMcast
index 36151c7fb..9ab195e85 100644
--- a/Shorewall/Actions/action.allowMcast
+++ b/Shorewall/Actions/action.allowMcast
@@ -28,10 +28,10 @@ DEFAULTS -
 
 ?if passed(@1)
     ?if @1 eq 'audit'
-        ?require AUDIT_TARGET
+	?require AUDIT_TARGET
 	Multicast(A_ACCEPT)
     ?else
-        ?error "Invalid argument (@1) to allowMcast"
+	?error "Invalid argument (@1) to allowMcast"
     ?endif
 ?else
     Multicast(ACCEPT)
diff --git a/Shorewall/Actions/action.allowinUPnP b/Shorewall/Actions/action.allowinUPnP
index af5de9963..a02af6e63 100644
--- a/Shorewall/Actions/action.allowinUPnP
+++ b/Shorewall/Actions/action.allowinUPnP
@@ -28,13 +28,13 @@ DEFAULTS -
 
 ?if passed(@1)
     ?if @1 eq 'audit'
-        ?require AUDIT_TARGET
+	?require AUDIT_TARGET
 	A_ACCEPT - - 17 1900
 	A_ACCEPT - -  6 49152
     ?else
-        ?error "Invalid argument (@1) to allowinUPnP"
+	?error "Invalid argument (@1) to allowinUPnP"
     ?endif
 ?else
     ACCEPT - - 17 1900
-    ACCEPT - -  6 49152
+    ACCEPT - -	6 49152
 ?endif
diff --git a/Shorewall/Actions/action.dropBcast b/Shorewall/Actions/action.dropBcast
index 046368bf7..a2c7bd8bb 100644
--- a/Shorewall/Actions/action.dropBcast
+++ b/Shorewall/Actions/action.dropBcast
@@ -28,10 +28,10 @@ DEFAULTS -
 
 ?if passed(@1)
     ?if @1 eq 'audit'
-        ?require AUDIT_TARGET
+	?require AUDIT_TARGET
 	Broadcast(A_DROP)
     ?else
-        ?error "Invalid argument (@1) to dropBcast"
+	?error "Invalid argument (@1) to dropBcast"
     ?endif
 ?else
     Broadcast(DROP)
diff --git a/Shorewall/Actions/action.dropMcast b/Shorewall/Actions/action.dropMcast
index 9017f524a..9b7118c14 100644
--- a/Shorewall/Actions/action.dropMcast
+++ b/Shorewall/Actions/action.dropMcast
@@ -28,10 +28,10 @@ DEFAULTS -
 
 ?if passed(@1)
     ?if @1 eq 'audit'
-        ?require AUDIT_TARGET
+	?require AUDIT_TARGET
 	Multicast(A_DROP)
     ?else
-        ?error "Invalid argument (@1) to dropMcast"
+	?error "Invalid argument (@1) to dropMcast"
     ?endif
 ?else
     Multicast(DROP)
diff --git a/Shorewall/Actions/action.dropNotSyn b/Shorewall/Actions/action.dropNotSyn
index a4508fef0..a18b5ac79 100644
--- a/Shorewall/Actions/action.dropNotSyn
+++ b/Shorewall/Actions/action.dropNotSyn
@@ -28,10 +28,10 @@ DEFAULTS -
 
 ?if passed(@1)
     ?if @1 eq 'audit'
-        ?require AUDIT_TARGET
+	?require AUDIT_TARGET
 	A_DROP {proto=6:!syn}
     ?else
-        ?error "Invalid argument (@1) to dropNotSyn"
+	?error "Invalid argument (@1) to dropNotSyn"
     ?endif
 ?else
     DROP {proto=6:!syn}
diff --git a/Shorewall/Actions/action.rejNotSyn b/Shorewall/Actions/action.rejNotSyn
index 7bfe0f692..0022c9e03 100644
--- a/Shorewall/Actions/action.rejNotSyn
+++ b/Shorewall/Actions/action.rejNotSyn
@@ -28,10 +28,10 @@ DEFAULTS -
 
 ?if passed(@1)
     ?if @1 eq 'audit'
-        ?require AUDIT_TARGET
+	?require AUDIT_TARGET
 	A_REJECT {proto=6:!syn}
     ?else
-        ?error "Invalid argument (@1) to rejNotSyn"
+	?error "Invalid argument (@1) to rejNotSyn"
     ?endif
 ?else
     REJECT(tcp-reset) {proto=6:!syn}
diff --git a/Shorewall/actions.std b/Shorewall/actions.std
index 2fb6a5612..9c5f20452 100644
--- a/Shorewall/actions.std
+++ b/Shorewall/actions.std
@@ -12,7 +12,7 @@ A_Drop				# Audited Default Action for DROP policy
 A_REJECT     noinline,logjump	# Audits then rejects a connection request
 A_REJECT!    inline		# Audits then rejects a connection request
 A_Reject			# Audited Default action for REJECT policy
-AllowICMPs   inline             # Allow Required ICMP packets
+AllowICMPs   inline		# Allow Required ICMP packets
 allowBcast   inline		# Silently Allow Broadcast
 allowinUPnP  inline		# Allow UPnP inbound (to firewall) traffic
 allowInvalid inline		# Accepts packets in the INVALID conntrack state