I would like to set up a VPN between my LAN:
- Windows 7 Ultimate Desktop workstation
- OpenSuse 9.3 server
and my co-located web server:
- Windows 2008 R2 Web Edition server (with just one NIC!)
However, I do not want to expose my LAN resources to threats originating from the web server. I do realize that IP packets must be allowed to travel both ways from through the VPN, but the web server should not be able to access any open ports on my LAN. In other words it should not be able to see my LAN's shared files, my LAN's web server, etc...
How would you create such a setup?
Edit: I do already understand basic concepts about this question, what I am looking for is some kind of tutorial (or several tutorials that work together).