> You can forward 5900 though a SSH tunnel, and you'll get a nice, secure > connection. But you'll have to limit connections on the windows box to not allow 5900 port access from NON localhost connections and such. -Will