*** empty log message ***
diff --git a/ebtables.c b/ebtables.c
index 271415c..a79cfd1 100644
--- a/ebtables.c
+++ b/ebtables.c
@@ -1296,7 +1296,8 @@
 		begin += entries->nentries + 1;
 	if (end < 0)
 		end += entries->nentries + 1;
-	if (begin <= 0 || begin > end || end > entries->nentries)
+
+	if (begin < 0 || begin > end || end > entries->nentries)
 		print_error("Sorry, wrong rule numbers");
 
 	if ((begin = check_rule_exists(begin)) == -1 ||
diff --git a/extensions/ebt_arp.c b/extensions/ebt_arp.c
index 13cbc7b..a4a4105 100644
--- a/extensions/ebt_arp.c
+++ b/extensions/ebt_arp.c
@@ -57,7 +57,7 @@
 "--arp-mac-dst [!] address[/mask]: ARP MAC target specification\n"
 " opcode strings: \n");
 	for (i = 0; i < NUMOPCODES; i++)
-		printf("%d = %s\n", i + 1, opcodes[i]);
+		printf(" %d = %s\n", i + 1, opcodes[i]);
 	printf(
 " hardware type string: 1 = Ethernet\n"
 " protocol type string: see "_PATH_ETHERTYPES"\n");
@@ -288,12 +288,14 @@
 		if (arpinfo->invflags & EBT_ARP_SRC_MAC)
 			printf("! ");
 		print_mac_and_mask(arpinfo->smaddr, arpinfo->smmsk);
+		printf(" ");
 	}
 	if (arpinfo->bitmask & EBT_ARP_DST_MAC) {
 		printf("--arp-mac-dst ");
 		if (arpinfo->invflags & EBT_ARP_DST_MAC)
 			printf("! ");
 		print_mac_and_mask(arpinfo->dmaddr, arpinfo->dmmsk);
+		printf(" ");
 	}
 }