[FW-1] Configuration help / suggestions ! URGENT ..

[drajan@FW1-NOSPAMCROSSACCESS.COM]

Have the following configuration.

Running W2K - NG FP2.
2 internal private networks. 
One machine on the private network has 2 Operating sysetms  ( VM - and VSE is running on top of VM. )

**   VM   = 192.168.10.x   -  default gateway point to  Firewall's internal interface ( 192.168.10.y )
** VSE   = 10.10.10.z       -  default gateway point to   VM's IP address                 ( 192.168.10.x  )

All  desktops on the other network ( 192.169.x.0 ) whose default gateway pointing to firewalls 2nd internal  interface ( 192.169.10.y) cannot access / even  ping to VSE box ( 10.10.10.z ) unless antispoofing feature is disabled on the entire internal networks.  However VM box can be accessed w/o any pbm from anywhere.

following static route is added at the firewall 
>>route add -p 10.10.10.z  192.168.10.y 

Also, NAT reqd for this machine for remote access.  It does not work now.
When i add something like this,
>>route add -p valid-address-vse  10.10.10.z  
( getting wrong / unknow gateway address. - cant add the route ? ) what i am doing wrong?

Q1: Need all the internal machines to access the VSE box  with the anti-spoofing enabled? How do i accomplish this?
Q2: How do i implement the NAT for this particular machine.

Thanks in advance.
-dev