Sorry for the number of posts, but I think this approach solves another problem, too. If that Windows 2000 server is a LAN server (which it probably is), putting a proxy/gateway machine in between it (and the rest of the LAN) and the DSL connection is a good idea anyhow. OpenBSD would definitely be the answer, IMHO: free, "secure by default", and pretty easy to use. It's not Windows point&click, but it is still pretty easy to get going.