Secure way for using Terminal Services

When setting up clients servers for remote admin using Win 2K Terminal Services, I have 2 options. One would be to setup a second nic in the server giving it a public IP address on the Internet so that I could access it directly with the Terminal Services client. The second way would be to use a Linksys firewall/router, open the necessary port for Terminal Services and access the Terminal Server this way. Option 1 is easy to do, but puts the servers second nic directly on the Internet. Option 2 is also easy to do but opens up a port in the firewall which is directly router to the private IP address of the server. Which of these methods would be best or most secure?