----- Original Message ----- 
From: "Vance Broady / Superior Tel" <vbroady at superior dash tel dot com>
>I need to set up a non-nat DMZ.  A static WAN IP to an internal network
> (same) static IP.  Even a 1:1 nat will not work.  No translations of IP
> addresses can happen.  This is for a Linux-based communications server.

There are two ways to achieve this, and you probably won't like either of 
them.

The first is to get a routed /30 or larger assigned and use ordinary routing 
to/from the network you dub your dmz. The upside is that it's the pure way 
to do this, and it'll work. always. The downside is that you need more 
routable addresses.

If you're really short on routable addresses and can't get a routed network, 
that leaves the filtering bridge option. Bridge the wan and dmz interfaces, 
and enable filtering bridge. Not pretty, but it solves the problem of 
getting VPN servers to work.

/Kasper