So I think I found a way to do what we want. We're going to try setting up a reverse proxy with
Squid that acts as a gateway to the private LAN where our Jail servers reside. I haven't gotten it working yet, but if it works I'll definitely let you know.