There are several ways. If you have enough IP addresses, you can plug the server and MT box into a switch that connects to the feed from the upstream provider. You can also setup 1:1 NAT so that all traffic headed to one of the Public IP's on the MT box is routed to the server. You could also put in a bridge interface and put a Public IP on the server. The first method would require a software firewall, since the server would be fully exposed to the internet. With the other methods, you could put rules into the MT firewall to protect the server.