Right, but he's accessing the system from a remote network. Is he using a VPN? Is there a hole for RDP poked through the lawyer's firewall?
He definitely doesn't have a VPN. As for the firewall, I couldn't tell you. He's just running a Belkin wireless router (that he didn't know the login to), so I couldn't see if there was any port forwarding or anything.
*edit*
It does look like the way he's set up he has two gateways. The server is 192.168.0.1, and the router is 192.168.1.1. Problem in the future?