Internal addresses with a web server

I have just got my company off of static ip addresses and switched to internal with DHCP. I am now trying to keep my web and mail server secure by not putting them out on the internet with a class c static ip address. I am running my dhcp through mysonicwall firewall. Any ideas on how to keep my web and mail servers safe on the internet?