..but it's a pain in the ass to configure. Instead I installed WinRoute Pro. For a simple setup, you can get a free WinRoute Lite.
Just allowing forwarding won't work.
Also, the 2000 server need not (probably should not) be a domain controller for this simple purpose, unless you're keen about setting up DNS records and want to learn where thing are (goofy changes from NT 4).