Advice - anyone ?

Hi all !

I've posted not long time back some questions about password protection
combined with LVS. I got an advice that pointed me in the direction of
using squid, but, unfortunately that didnt really work since the web app I
have in the backend dont really support proxy. Shit. It almost solved my
problem.

So, ok - as the environment are today. I run some web servers wich
unfortunately are running IIS. They serv a application I dont trust one
bit to have open to the internet in general. But, it seems that I might
have to find a way to do this in the near future. So, I'm looking for
something that can auth a user before I let them in to my dmz ... or
anything that does something simular. Anyone have any suggestions, or can
point me in the right direction ?!