I would like to open my SQL server to a co-developer at another site.
We don't want to use VPN as we are trying to test a product for response times.

I have already removed xp_cmdShell. I am using mixed mode authentication with .NET.

What port should i put SQL server on.
Is there anything else i can do to keep from being hacked.

I have zone alarm running as well..

Thanks in advance.