The subnet's are from one operator.
Both of the subnets will be routed to m0n0wall.
So I want the wan ip adress to listen to both subnets (like ip aliasing)
Then I want to setup per ip the different firewall rules.
So I think I don't need any NAT because these public ip adresses are routable.
But I will test it when I ordered the hardware.