Allow VNC and X-windows in iptables, allow INPUT/FORWARD by default.