fix typos in documentation

README.md

@@ -568,7 +568,7 @@ As part of this process several breaking changes where made to the code that wil
 * Attributes that allow both arrays and negated values have now been updated.
   * For attributes that require that all passed values be negated as one, you now merely have to negate the first value within the array, rather than all of them, though negating all is still accepted.
   * For attributes that allow passed values to be negated seperately this is not the case. All attributes in this situation are noted within their description.
-* The `sport` and `dport` attributes have been updated so that they will now accept with `:` or `-` as a separator when passing ranges, with `:` being preferred as it matchs what is passed to iptables.
+* The `sport` and `dport` attributes have been updated so that they will now accept with `:` or `-` as a separator when passing ranges, with `:` being preferred as it matches what is passed to iptables.
 
 Two pairs of manifest taken from the tests can be seen below, illustrating the changes that may be required, the first applying a hoplimit on `ip6tables`:
 

lib/puppet/type/firewall.rb

@@ -1002,7 +1002,7 @@
       * REJECT - the packet is rejected with a suitable ICMP response
       * DROP - the packet is dropped
 
-      But can also be on of the following:
+      But can also be one of the following:
 
       * QUEUE
       * RETURN