Hi, I want to realize a ssh tunnel for VNC behind two different factories, where clients are behind a firewall (one firewall per factory). I have done something with ssh -L, but never for vnc and behind two firewalls. The situation is this: machine A: mac os x with vnc server machine B: windows cwith vnc viewer firewall FA: linux with iptables and masquerading firewall FB: linux with iptables and masquerading I thought to enable the tunnel starting on FB, with something like: ssh -L vnc_port:FA:vnc_port thus when B tries to connect to A, it will be redirected to the FA:vnc_port. Now, what do I have to do on FA? I don't want to use ssh behind FA and FB, so I'd like to not use ssh over A and B. How can I configure the two firewalls to do this? Thanks, Luca -- Luca Ferrari, fluca1978@xxxxxxxxxxx - : send the line "unsubscribe linux-admin" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html