FWIW, if you have ssh working and you use VNC over an SSH Tunnel you do not need ports 590X or any other ports open!