🚀 go-pugleaf

Hi,
I have a small home network, a dsl connection and 1 static ip. At times I go
out of town and would like to get to my windoz boxes from over the internet
using ipsec. I could use win2000 svr easyly as a gateway but would prefer
not to. I have a fbsd 4.5 as a ipf/nat gw. Is it possible to tunnel from a
ms client to my fbsd gateway with ipsec. If so how would my remote ms box
login to my domain from the fbsd box. I understand the issues of nat and
ipsec. I do not understand how to design a physical structure that will
work. I am willing to move the nat service to another box and dedicate my gw
as a ipf/ipsec box however I do not understand how my ms client box will
find the DC to login in. How do you setup a

remote Win2000  client
 ipsec tunnel starting point
        |
        |
    Internet
      |
      |
Freebsd gw
  ipf/ipsec tunnel end point
        |
         |
    Nat service
        |
        |
Win2000 Domain login server

So when I am on the road that my client box can log onto my home win2000
domain. I am not asking for detailed technical info but generalize info.
Such as if this is possible , physical lay outs, programs to use and any
thing you are willing to share.

Thx