Exchange 2000 can do accomplish your ideal situation. The OWA is a front-end server that can be located in a DMZ and the actual 2000 Exchange server is the back-end server. Do a search on Microsoft's website for a document called E2KFBTop.doc. This goes into detail about front-end back-end scenarios. An excerpt from the document:
The front-end and back-end server topology is recommended for multiple-server organizations that use Microsoft Outlook Web Access (HTTP), POP, or IMAP and for organizations that want to provide HTTP, POP, or IMAP access to their employees over the Internet. After receiving a request, the front-end server uses Lightweight Directory Access Protocol (LDAP) to query the Windows 2000 Active Directory? directory service and determine which back-end server holds the requested resource.
Note: A front-end server is a specially configured server running Exchange 2000. A back-end server is a server with a standard configuration running Exchange 2000. There is no configuration option to designate a server as a back-end server. The term ?back-end server? refers to all servers in an organization that are not front-end servers after a front-end server is introduced into the organization.