DocBook validation correction

termining a bunch of </para> and </sect2> in order to allow validation.
N.B. script vpn-pppssh should be included with this source and is not

LDP/howto/docbook/ppp-ssh.sgml

@@ -464,6 +464,7 @@ located in either the US or Canada. Therefore, depending on who
 you are, obtaining Cerberus ranges from moderately
 difficult to effectively impossible.
     </para>
+  </listitem>
   </varlistentry>
 
   <varlistentry>
@@ -482,6 +483,7 @@ However PPTP is generally considered to have
 Probably the best Linux PPTP implementation is PoPToP, found at
 <ulink url="http://poptop.lineo.com/">http://poptop.lineo.com/</ulink>.
     </para>
+  </listitem>
   </varlistentry>
 
   <varlistentry>
@@ -498,6 +500,7 @@ promising.  For more information, the
 <ulink url="http://www.linuxdoc.org/HOWTO/mini/Cipe+Masq.html">CIPE-MASQ
 Mini-HOWTO</ulink> is a terse but informative read.
     </para>
+  </listitem>
   </varlistentry>
 
 </variablelist>
@@ -516,7 +519,7 @@ Mini-HOWTO</ulink> is a terse but informative read.
 <para>
 Because setting up the VPN very much resembles a client-server
 transaction, I'll borrow from that terminology to give a name
-to the computer at each end of the tunnel:
+to the computer at each end of the tunnel:</para>
 
 <variablelist>
 
@@ -1118,6 +1121,7 @@ your settings are being interpreted correctly.
 </listitem>
 
 </orderedlist>
+</sect2>
 
 
 <sect2>
@@ -1557,12 +1561,14 @@ the VPN, I need to run the following command:
 <screen>
 # route add -net 192.168.3.0 netmask 255.255.255.0 gw 192.168.1.1
 </screen>
+</para>
 
 <para>
 Now, any packet destined for the 192.168.3.0/24 network on the local machine
 will be relayed to host 192.168.1.1 on the local network to be forwarded through
 the VPN.
 </para>
+</sect2>
 
 <sect2>
 <title>Routing</title>
@@ -1609,6 +1615,7 @@ connected to the client or server to the opposite machine.
 May your PPP-SSH VPNs serve you quietly and reliably for many
 years to come.
 </para>
+</sect2>
 
 
 </sect1>