Put Server in DMZ or use Port Forwarding - win 2003 RAS?

[Fox1977]

Hi folks,

Just a couple of queries relating to setting up a VPN using MS RAS on a win 2003 server. I have a draytek 2800vg router and I have one static IP.

I am trying to setup RAS on a server on a local IP behind the draytek router. What is the best way to get the clients past the router to the server. Is it through putting the IP address of the server into the DMZ and then locking down the network interface or is it best to forward the relevant ports onto the local IP. Im guessing that forwarding the ports is more secure as less it exposed.

 

[Fox1977]

is the best way to move the local server IP out of the DMZ and forward port 1723 TCP on the router onto the local IP? Is there any other ports that need forwarding?

I am in the first instance just looking to get a VPN up and running using PPTP.