--- /tmp/1	2008-11-24 07:04:48.000000000 +0000
+++ /etc/sysconfig/iptables	2008-11-24 07:04:38.000000000 +0000
@@ -18,2 +18,4 @@
 -A RH-Firewall-1-INPUT -p tcp -m tcp -d 128.232.104.28 --dport 80 -j ACCEPT
+#1 Allow VNC from within the Lab (e.g. xencenter 128.232.14.103)
+-A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp -s 128.232.0.0/17 --dport 5900 -j ACCEPT
 #5 Allow ssh from within the Lab, but block repeated calls from outside (i.e. 3 / 80s)
