>
> In other words, if the user is on the WAN, then they'll need to type in
> a public IP (they won't be able to use 192.168.1.110 unless they're
> trying to connect to a box on their own LAN), and your firewall rules
> (and NAT settings) must allow WAN users to establish TCP-3389
> connections to the target box.
>

oh, that's a good point.  it's probably trying to connect the users to
the private IP.

not sure how to correct that though.  to check out what it's
attempting, run a packet sniffer (like Ethereal) on the client machine
attempting connections from the Internet.

-Chris