Two public IPs to help out firewall?

Hi All, Just a question - let's say I'd like to use two public IPs. One for the host machine and the other for VMs in the DMZ. Therefore, all I need to do is create alias eth0.0, set additional public IP to it and postroute all the traffic to e.g. 192.168.0.0/24 network? Will it work? Is it better solution than creating vmbr0? My idea is to hide the first IP that I'm using for the host machine and "publicly" use only the second one with port forwarding on. Thanks a bundle!