On modern firewalls/routers, NAT is only one cooks in the network kitchen raining on this author's parade. Stateful Packet Inspection has timeouts too!
I had an elastix box for a while and after watching a few vulnerabilities go unpatched and getting hacked twice I gave up on Elastix... http://www.elastix.org/en/component/kunena/116-security/6078.... Switched to PBX in a Flash and while its more secure, the user interface is clunky and requires you to use a number of custom closed-source scripts to keep everything up to date...
If my assumption of dropbox's intent is correct, I prefer facebook's approach to this problem. Instead of wording terms exclusively in their favor they could have extended an olive branch...
"For content that is covered by intellectual property rights, like photos and videos ("IP content"), you specifically give us the following permission, subject to your privacy and application settings: you grant us a non-exclusive, transferable, sub-licensable, royalty-free, worldwide license to use any IP content that you post on or in connection with Facebook ("IP License"). This IP License ends when you delete your IP content or your account unless your content has been shared with others, and they have not deleted it."
facebook's license to share the picture of your cat terminates after you delete it from your profile. Had dropbox used similar strategy while drafting their terms, this would not be news...
(Disclaimer: I am not a lawyer and do not pretend to be one on TV.)
2. What uses are permitted while the license is in effect. This is the part that is currently way too broad. It should be limited to what's necessary to carry out the user's instructions. In other words, Dropbox should only be able to use your content in your own interest, not in theirs or any third party's.
(This post is informational only, not intended to be legal advice or to create an attorney-client relationship.)
Diomede might be worth a look. Their offline and nearline options are waaay less expensive than S3. Never used them though so let us know how it works out if you go with them.
As far as I can tell, they're closed down ... their blog (http://diomedeblog.wordpress.com/) has been inactive for over a year, and as far as I can see there's nowhere for existing users to log in (they had open signups at one point last year...)
Edit: Actually, it looks like they closed on Mar 19, according to an email they sent to existing users. They say they might reopen "with a new approach" near the end of the year.