Is there going to be any problem with you guys using CVS only over ssh? I don't want to open up the machine that is going to be outside the firewall too much, and I would be much happier if I left it with only ssh access. I don't mind general read-only access being straight through if you think that is useful to others.