Benjamin Smith wrote: > On Friday 16 March 2007, MrKiwi wrote: > >>mitigate a situation >>where you have no control over an intermediate firewall that >>only passes port 80 > > > Yes, that's EXACTLY what I'm trying to do... but I dont' see how this exactly You will have a race condition. You could, maybe, enable the DNAT for the source IP of the http request, that would alleviate both the race condition and the urgency to turn of off. Also, you might be better enabling ssh through which you can more cleanly pipe your steaming hot VNC. Or negotiate a clean pass with your network administrator; such folk tend to take a very dim view of those who would circumvent the rules. -- Cheers John -- spambait 1aaaaaaa at coco.merseine.nu Z1aaaaaaa at coco.merseine.nu Please do not reply off-list