We have generally not needed to make any special changes to the firewall
rules for ActiveSync. Just setup a VIP using 443 pointing to the
internal IP of your mail server.
We normally get a Netgear DG384 to use as the modem. Just change the
mode on the netgear to Modem mode and connect it to Wan1. You can get a
Netgear ADSL modem but our supplier doesnt stock them anymore.