通过web服务公开SQL服务器数据库的最佳方式是什么

We have a SQL Server on an internal network. Now however, we want to create a public web site that allows users to access some of the data on the SQL Server. To avoid giving the public web server direct access to the SQL Server, we have decided to write a web service to expose the necessary database objects. The service (and consuming web site, for what it is worth) is to be written in .NET. It seems to me we have two options here. We have a SQL Server on an internal network. No