Secure File Acces

[Moritz Fromwald]

Hello
I have the following Setup:
ADSL Modem
	|
PPPoE Tunnel, possibly up to 8 IP available
	|
FreeBSD 4.4 NAT, ipfw deny any to ip of tun0
	|		ipfw allow ssh from admin-IP to ip of tun1
	|
SAMBA Server on FreeBSD 4.7

I would like to create a secure access from the Internet to the 
data on the file server using vpn. 
Are there more secure solutions?
Which ports will I need?
How to tunnel through the NAT-Gateway?

TIA  

Regards

Moritz Fromwald