Recently we needed to use Forms Based Authentication with Active Directory from an Extranet. This is how we got it to work.1. Extend the Web ApplicationInstead of tweaking the internal web app, Extend the web application you want to expose to the Extranet, giving it the required host headers etc.2. Configure SharePoint Central Admin to use FBA for the "new" Web Applications