How do I create NAT-less DMZ?

[TDJ211]

I have a server that needs to be NAT-less but still be behind firewall for traffic shaping purposes.

I have mulitple public IP's (all in same /27 subnet) and the WAN is assigned one of them.

I think what needs to happen is create VLAN'd interface with none as IPv4 and IPv6, create a complete "any protocol any source  any destination" rule, and then in the outgoing NAT section, select "do not NAT.

I wont be able to try this until I get back to work after the weekend, but does this seem about right?