Hope the networking guru's can help me out here.

The situation is this, I have a windows machine on my home network running a VNC Server. This machine sits behind a linux machine that acts as the firewall/router(doing NAT). I am currently at work and trying to connect to said windows machine via VNC.

I have set this in my firewall:

# iptables -t nat -A PREROUTING -p tcp --dport 5900 -s ! 10.10.0.3 -j DNAT --to 10.10.0.3:5900

where 10.10.0.3 is the IP of the windows machine. I get a VNC prompt to enter my password when I then try to connect to the machine and then nothing....vnc just sits idle. I have tested that VNC is working by connecting to the Linux machine on :1 and it works fine, so this leads me to think that something is wrong w/ my firewall dropping packets.

Questins:
#1 Is this the best way to do it?
#2 Can I use SSH(for obvious security) to do the forward from the linux machine to the windows machine behind it(even tho it has an unroutable IP)?

I have tried using the ssh howto on the VNC homepage...but it didn't even give me a login prompt like using DNAT did.

J