I'd love better java support in pdaxrom.... simple end user stuff that runs common apps , etc. Especiallly some sort of web browser java plugin thing... I hope this isn't getting too technical
However, if you want to do vnc ( I use tightvnc, but I doubt it matters much) through a firewall, it is pretty easy to forward the vnc ports through an ssh tunnel. ssh can tunnel anyplace, if you have a server on the outside and the ssh server daemon listening on the right port. This way, you can tunnel out via ssh (on, say, port 80), use it to forward the vnc port and run your remote vnc on your local host.
There is plenty of documentation online on ssh port forwarding.
my 3100 runs remote vnc over a forwarded port using ssh and works very nicely. I have a headless dual p3 700 running debian with a dyndns dynamic domain name always up and in my "DMZ" doing various server things. I just ssh in, start a vncserver, do the port forwarding line on my z, at a new prompt tell the vncviewer to look at localhost:whatever-desktop-number-I'm-using-in-vnc
Betwwen ssh, tightvnc, and tricke--if I need it, I can be reasonably unobtrusive and generally not abuse the bandwidth more than web surfing. In fact this is one way to surf securely and manage p2p stuff remotely, etc
some instructions.