thx2000

Yea, dont think thats going to happen w/o a few more WAN IP's. DNS is going to resolve the IP client side, and by the time it hits your firewall/router its going to have no idea what hostname was used to get there.

Sparda, Then yea, to my knowledge the only service thats going to let you manipulate traffic based on a hostname is http, this simply because of the interaction the browser maintains with the server. Once DNS has resolved the IP of a particular host name the machines communicate strictly based on their IP addresses and have no knowledge of the hostname used to initially retrieve the IP. So...I still think VPN is the way to go here. If not, i think we're gunna need more information on just what exactly he's trying to do here, ie what services he's trying to port through his firewall.

Extremely confused on what exactly you're trying to accomplish here. I think you're looking to do a remote desktop connection to 2 separate machines based on a dyndns name. Regardless, you're on the right track with a VPN. Since it looks like you have a spare box you could throw at this task check out m0n0wall (m0n0.ch) or pfSense (pfSense.com). These are both open source firewall projects that will let you take an old beater machine and turn it into a pretty robust firewall. From there you can configure a variety of different types of VPN's. The easiest (and least secure) being PPTP which will let you set up a quick connection on any windows box and gain complete access to any of the resources inside your network. Good luck.