Public Sub in DMZ & MK - NAT from DMZ Host to priv LAN

Hello i testing one Network with Public /29 Subnet.
one IP of this subnet is from the provider i can not use this.
The first free IP address of this /29 Subnet is in use for Mikrotik (Default Gateway for private network)

I want to setup one reserve proxy for Mikrosoft Exchange OWA Server but i´m not sure if my plan is correct.

any IP ask → 176.4.62.214:443 then on MK i have

/interface bridge filter
permit from ether8 0.0.0.0/0 to ether9 176.4.62.214 443

but how can i permit Access from 176.4.62.214 to my private LAN, i need to NAT an Masqurade in bridge modus ?

Or is this the wrong way ?

my MK informations
ether8 + ether9 = bridge-SDSL
ether1 input from SDSL 176.4.62.210
ether2 interface to LOCAL LAN

routing Plan
on MK 0.0.0.0/0 over 176.4.62.209
on LAN 0.0.0.0/ over 192.168.88.254
on Reserve proxy 0.0.0.0/0 over 176.4.62.209
Zeichnung17.jpg

I suggest that you upload output from /export compact. In this situation you have to get the addresses/masks correct. e.g. in your graphic you show both the WAN connection and the reserve proxy with /29 after the address which wouldn’t really work in practice.

good morning i dont have any config at the moment, i´m plan this config.
and what is the right way.
My plan is one Public IP adresse from the /29 Subnet using un MK for LAN-Network, and any other IP from this /29 address using in Bridge Modus for Firewall in DMZ LAN.
But how can i get communication from DMZ to LAN-Network

Ok i testing in my lab but i dont get any config that works with hosts in DMZ network.
i found a other solution meens pory arp.
But im not sure how i configure this, can me some one give one example by this picture ?
public-proxyarp.png