<!-- addition starts here -->

      <qandaentry>

	<question>

	  <para>There must be something wrong.  I followed your instructions

	    to the letter and now I am locked out.</para>

        </question>

	<answer>

	  <para>This tutorial assumes that you are running

	    <emphasis>userland-ppp</emphasis>, therefore the supplied ruleset

	    operates on the <devicename>tun0</devicename> interface, which

	    corresponds to the first connection made with &man.ppp.8; (a.k.a.

	    <emphasis>user-ppp</emphasis>).  Additional connections would use

	    <devicename>tun1</devicename>, <devicename>tun2</devicename> and so

	    on.</para>

	  <para>You should also note that &man.pppd.8; uses the

	    <devicename>ppp0</devicename> interface instead, so if you start the

	    connection with &man.pppd.8; you must substitute

	    <devicename>tun0</devicename> for <devicename>ppp0</devicename>.  A

	    quick way to edit the firewall rules to reflect this change is shown

	    below. The original ruleset is backed up as

	    <filename>fwrules_tun0</filename>.</para>

	  <screen>

	    <prompt>&tilde; &prompt.user; </prompt><userinput>cd /etc/firewall</userinput>

	    <prompt>/etc/firewall &prompt.user; </prompt><userinput>su</userinput>

	    <prompt>Password:</prompt>

	    <prompt>/etc/firewall &prompt.root; </prompt><userinput>mv fwrules fwrules_tun0</userinput>

	    <prompt>/etc/firewall &prompt.root; </prompt><userinput>cat fwrules_tun0 | sed s/tun0/ppp0/g > fwrules</userinput>

	  </screen>

	  <para>To know whether you are currently using &man.ppp.8; or

	    &man.pppd.8; you can examine the output of &man.ifconfig.8; once the

	    connection is up. E.g., for a connection made with &man.pppd.8; you

	    would see something like this (showing only the relevant lines):</para>

	  <screen>

	    &prompt.user; <userinput>ifconfig</userinput>

	    <emphasis>(skipped...)</emphasis>

	    ppp0: flags=<replaceable>8051&lt;UP,POINTOPOINT,RUNNING,MULTICAST&gt; mtu 1524</replaceable>

                    inet <replaceable>xxx.xxx.xxx.xxx</replaceable> --&gt; <replaceable>xxx.xxx.xxx.xxx</replaceable> netmask <replaceable>0xff000000</replaceable>

	    <emphasis>(skipped...)</emphasis>

	    </screen>

	  <para>On the other hand, for a connection made with &man.ppp.8;

	    (<emphasis>user-ppp</emphasis>) you should see something similar to

	    this:</para>

	  <screen>

	    &prompt.user; <userinput>ifconfig</userinput>

	    <emphasis>(skipped...)</emphasis>

	    ppp0: flags=<replaceable>8010&lt;POINTOPOINT,MULTICAST&gt; mtu 1500</replaceable>

	    <emphasis>(skipped...)</emphasis>

	    tun0: flags=<replaceable>8051&lt;UP,POINTOPOINT,RUNNING,MULTICAST&gt; mtu 1524</replaceable>

	            <emphasis>(IPv6 stuff skipped...)</emphasis>

                    inet <replaceable>xxx.xxx.xxx.xxx</replaceable> --&gt; <replaceable>xxx.xxx.xxx.xxx</replaceable> netmask <replaceable>0xffffff00</replaceable>

                    Opened by PID <replaceable>xxxxx</replaceable>

            <emphasis>(skipped...)</emphasis>

            </screen>

	</answer>

      </qandaentry>

<!-- addition ends here -->