SuSEfirewall2 and DHCP in DMZ

Hello All, I wish to set up a SuSEfirewall2 server acting as a NAT gateway wiht three interfaces. I have a Lucent firewall connecting to the web but want to be able to set up access rules on who on my internal LAN can access which of my servers. My question is, how do I configure SuSEfirewall2 so that my DMZ (eth1) and my LAN (eth2) are a) both in the same subnet, b) DHCP server in the DMZ is available for DHCP requests from LAN workstations, and c) enable Netbios over TCP traffic to move through the eth2 to eth1 (and vice versa) ports. Essentially this box will be doing NOTHING other than NAT and routing between the three ports. any help would be appreciated. Thanks Barry