As before, the -L instructs ssh to listen on LOCAL port
5901 and redirect any to connections to "workbox"
port 5901 (where the vnc server on "workbox" is
listening). Of course this would be in addition to
all the other redirs, X, web, etc.

Then connect to the remote vnc server by running
"vncviewer :1" locally.

N.B. It is a good idea to add "-encoding hextile" to
the vncviewer line otherwise performance may be
terrible (vnc special cases localhost for no compression)