Jeff B wrote:
> 1) use ONLY your public IP addresses, not the 127.*.*.* OR
> at least use your DHCP address assigned.


Huh?

I'm using localhost with no problems at all to tunnel VNC connections.

ssh -NL 5900:localhost:5900 myid@myIP

This works for me.