If someone is setting up a small Co Location facility, We are obliged to let users do do what they like with their own equipment. We have a bunch of Internet Static IP's that we can assign them for such things as servers etc. Not many people are using this facility. However on or two are. They have asked for services such as VNC,SSH etc to be mapped straight out of the firewall onto the internet. We can do it no issue BUT I am conscious about security. Has anyone got any good articles for best practices etc? Rather than me spend hours telling the user that as soon as its live it will be hacked to bits within the hour?