Hi Tilf,
Indeed that was exactly resolution we had to employ; move the TW to the DMZ, use normal external NAT for the TW phone, but set an internal NAT rule to send it back to the 3300 for any local.
As you say, it seems strange but that's how we got it to work in the end!
Regards,
Nick