> -----Original Message----- > From: Max Kanat-Alexander [mailto:maxka at cats.ucsc.edu] > Sent: Monday, December 09, 2002 4:39 PM > To: thelist at lists.evolt.org > Subject: RE: [thelist] remote administration utils > Despite this, I use VNC and also recommended it to > the place I > work, where they use it almost ubiquitously. If you need some sort of > better security, you could block off ports 5900 and 5800 in > the router, and > then VNC would only be accessible from inside the LAN or > through the VPN. ok, i think i get this. you are saying that if i were only to use this within our LAN, i could instruct the firewall to allow requests from the internet to ports ports 5900 and 5800. but i'm a bit confusd about the VPN part. would i need to block those ports on our firewall here, and also in the clients router? (assuming his dsl "modem" can even block ports, which i doubt). what would be your suggestion with this? (and i believe the firewall already blocks everything except what i have explicity told it to allow. 25, 80, 443, and a few others.) thanks, chris.