if your router is set to bridge mode [ ipcop dials the connection] then port forwarding is only set in ipcop, but if your router holds the connection then you can set DMZ to forward all port requests to ipcop and then set forwarding from ipcop.
The router establishes the internet connection. What makes logical sense to me is that the router should forward traffic to the ipcop red interface. Ipcop should then forward traffic to the webserver. The only problem is that this does not seem to work.