Use a (C)PLD to map e.g. FFxx as I/O. If you integrate the address latch, you have plenty of time to drop the !WR/!RD to the momory on MMIO addresses. This can, of course be done in discrete logic, but it aint as pretty.

Have fun,
Erik