2003 Security -- IIS w/ incoming VPN connections

Tech-Archive recommends: Fix windows errors by optimizing your registry

I'm kindof embarrassed to be asking this, but I'm under a tight time
constraint here, so here goes my pride :)

I've got to relocate a 2003 IIS box from my LAN to a direct Internet
connection. The server's configured to operate as a standalone (no
network ties like AD or need to access any resources). However, I need
the following three things:

* The ability for it to accept incoming IIS requests
* The ability for it to accept some sort of secure connection such that
I can administer it the same as I do now -- is it possible to use the
same adapter for a VPN? I'm gun shy when it comes to letting a Terminal
Services/Remote Desktop configuration sit naked on the Internet.
* Deny all requests to any other port.

Is this possible? If so, I assume it would be very simple to configure.
Could I get a couple pointers?

-Alan

.