OS X Server has a built in firewall that you can configure using the Server Admin app (click on the server IP, expand the Services view next to the IP to see the Firewall option). On the router side, map the ports using the available NAT options to the serices you will provide on the server itself, i.e. map port 80 to server IP for web services, etc.
Hope this helps.