Tim Donahue wrote: >Perhaps this is easier than using a redirect statement in pf.conf. > >Set `sysctl -w net.inet.ip.forwarding=1` on both servers if it not already >set. > >vncviewer 192.168.1.122 > >Tim Donahue > > > > i am sorry , you are right . according to "man openvpn " , " example 3 : openvpn --remote june.kg --dev tun1 --ifconfig 10.4.0.1 10.4.0.2 --tls-client --ca tmp-ca.crt --cert client.crt --key client.key --reneg-sec 60 --verb 5" makes "vncviewer 192.168.1.122" enable .
surely i do not need rdr in pf.conf . so i again rewote vnc over openvpn in http://nakajin.dyndns.org/pikara.html thanks lots . takesima