module suggestions for split-mode blog implementation

Hi,
I've got an internal drupal 6.6 blog site, which company users can post to. Some users have the rights to publish content and approve comments.

I have an internet-facing drupal blog server in a DMZ, which internet users can read, but not post to.

I want to be able to give some internal users the ability to push content out to the drupal server in the DMZ (publish). I really want to avoid using an aggregator, as this would require an open port from DMZ to internal server. Is the reverse of this, push-based aggregation possible - or indeed something similar?

I looked at the staging module, but this really doesn't fit, as complete database replication isn't ideal: internal user accounts will not exist on the server in the DMZ, nor will LDAP auth.