Hi David.  I believe you have to have routing established between the 2
points.  In the past, I have connected a remote office with DSL to a main
office housing the HP3000.  The clients created a VPN connection to the NT
firewall and used Reflection through that connection.  A direct telnet via
the Internet is insecure.  If you have a firewall at each end, basically,
you direct traffic bound for a specific address on the local network, out to
a specific port on the distant firewall which forwards the traffic to the
HP3000.