in reply to secure remote command

For a different angle on this, have look at diald for doing a dial-on-demand setup on the gateway. Using this, you can have the gateway automatically open the connection based on packets going through.

CU
Robartes-