No-NAT Firewalling with Monowall

Just a heads up for anyone tearing their hair out over this one.

PROBLEM: After setting up monowall with no NAT, you can surf the web, but the websites hosted in your DMZ are inaccessible from the internet.

SOLUTION: For a No-NAT setup, see "Firewall: NAT: Outbound" and tick the box "Enable advanced outbound NAT". Ticking this box disables NAT (yes, really!) provided that you don't enter any NAT mappings.

OK, with that problem sorted, the next step is to try out IPV6.  Recent versions of Monowall support IPV6 out of the box, and my ISP supports IPV6 over ADSL, so it's got to be worth a go.