Is it possible for a customer to access( name password) a server( multihomed) with IIS running some (1)reporting tool, so that (1) send data requests to the db server on the LAN side but (1) does not hold to db itself? Thereby giving the customer access to the data but not the db server?
