At the web page http://www.uk.research.att.com/archive/vnc/sshvnc.html
"Making VNC more secure using SSH":
I have a question about the paragraph "More advanced use":
"In fact, the connection can be forwarded to a port on a third machine at the other end - it doesn't have to be snoopy that's running the VNC server, but remember that connections between snoopy and third machine will not be encrypted, only the one between you and snoopy. "
How to setup vnc over ssh so that connections between snoopy (machine linux1) and third machine WILL be encrypted?