Well you are going to need to configure rules if you want to be able to ping the DFL itself.
There is a post from about 4 months back about trying to insure it responds to trace routes.
I am not worried about trace routes through this thing so I would put that as our last issue.
Yes, a static could be configured if your ISP would abide, best not to play with fire if we have it up though.
You will need to have a port forward forwarding HTTP traffic to a server, then you will need to change the port of your DFL's remote management to not conflict. This can be done under System->Remote Management->Advanced Settings.