Externally facing customer gateway

[fritzfreund]

I'm looking for a way to allow customer (and maybe agent) access from the internet. This way people don't need to log into our VPN in order to check on their tickets.

However, I don't want the database out in the DMZ. I would rather have some kind of gateway server that just runs some web services then it talks back to our database/primary server over a few specific ports that are open in the firewall.

Has anyone else attempted this?

[crythias]

port 3306 is default port of mysql
Mysql must allow connection - either via 0.0.0.0 or single allowed ip address (firewall can mitigate)

Kernel/Config.pm
$Self->{DatabaseHost} = 'ip.of.host.or.fqdn';

you may need to change my.cnf, mysqld.conf, or appropriate file per installation of MySQL on your OS/Distribution and restart mysql server service after allowing connections via tcp/ip.