thats a god point..and then...with the actual config....( i filter the ports that the firewall trys to reach on remote machines..so they can't conect to ftp ot telent..or anything fiferent to 80.....)that any one could do a tunneling?¿ ( appart form teh one you allready told me....)