connection from outside

[mystic-d]

i installed cp-ngx(r60) and i have 3 interface, i configured one of them to get IP dynamiclly (this interface is the internet interface and i got the ip from my ISP), another interface is for the web-server (and the last is for managment), what did i need to configure if i want that everyone from the internet can see my web-page ?
(my main idea is to protect the web-server from the internet)
in the "address translation" tab i must that the destination of the original packet will be the same "size" as the destination at the translated packet ..
so how can i do this ?
thanks !