I've recently had to set up something like this, though I put it behind an IPSec gateway to provide some kind of security.