Hi David. I believe you have to have routing established between the 2 points. In the past, I have connected a remote office with DSL to a main office housing the HP3000. The clients created a VPN connection to the NT firewall and used Reflection through that connection. A direct telnet via the Internet is insecure. If you have a firewall at each end, basically, you direct traffic bound for a specific address on the local network, out to a specific port on the distant firewall which forwards the traffic to the HP3000.