I tunnel my VNC/X-Windows thru SSH only one port thru the firewall and it is already a needed port! X is installed but system boots to runlevel 3 as I find command line much faster. As for hardening your box the object is to not let them get in in the first place X-windows is the least of your worries once they have access. We run RedHat ES4 for our webservers but CF is still running on win2k3 I hope to change that soon!!
As for X being unstable I run RedHat WS4 on my workstation install was super easy. Of course I also run VMware Workstation 5 (running XP) so I can access corp email. AD Admin wont join my Linux box to the domain. ~Eric ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Introducing the Fusion Authority Quarterly Update. 80 pages of hard-hitting, up-to-date ColdFusion information by your peers, delivered to your door four times a year. http://www.fusionauthority.com/quarterly Archive: http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:253015 Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4