I'm a developer by trade but because I'm therefore an "expert" at all things IT I'm find myself helping out at my wife's office from time-to-time... however I'm pushing my networking knowledge a little here so I was hoping somebody here could help me out a bit.

The situation (as I recently found out!) is that they have a website hosted in their office (publically accessible via a fixed-IP that is port-forwarded (80 and 443) on their simple Netgear Wifi AcessPoint/Router to their server). This server holds EVERYTHING for the company - their databases, documents etc. The databases are accessed by the website and internal users with an internal Windows application. The DBs hold fairly private data. When I found out they were doing this I recommended they move the website to another server (they had a spare one), and keep the public access separate from their main server. The main server runs Win2k3 SBS and the Webserver I've setup runs Win2k3 Web Edition.

What I was thinking of doing was putting the webserver on a different subnet (say 192.168.10.x instead of 192.168.0.x) and having the router forward 80 and 443 onto that. Then multi-home the main server so it can see the other subnet, too. However the router cannot forward to a different subnet so I got a bit stuck and ran out of networking know-how. The router is doing DHCP, by the way.

Is there a way to configure this sort of thing using RRAS? Or am I fighting a lost-cause? Should I persuade them to buy a better router (which has to be CHEAP! - they are a tiny firm, and something I could conceivably setup). Or would keeping the webserver on the same subnet be ok, if some sort of firewall software were properly configured?

Any help and guidance greatly appreciated.