Double NATs

I have a ISA 2000 box being fed using Cable internet, and another backup
ADSL internet connection via a wireless through a WRT54G box at another
building that I use a bridge to poll into the server room so its connected
to a HP Procurve 2524 24-port switch.

My setup is like this...


Building 1 on 192.168.1.0/24 subnet (VLAN2)
---ADSL---WRT54G>> to building 2

Building 2 on 10.10.X.X / 255.255.0.0 subnet (VLAN3)
from WRT54G>> wireless link <<---Win2003 server with wireless/fiber
adapter acting as bridge-----multimode fiber-------Layer 3 Switch VLAN
2 ----HP2524 Switch----- ISA Server

ISA Server has 3 interfaces:
External <from cable isp>
External 192.168.1.3 <from WRT54G
Internal 10.10.10.254

I want to use the ADSL connection to publish a server on the 10.10.x.x range
so I went into the setup on http://192.168.1.1 and setup port forwarding,
(Citrix ICA 1494 to 192.168.1.3 both TCP and UDP)

Then on the ISA Server I published from 192.168.1.3 (Treated as external
interface since I didnt put it into the LAT) to 10.10.30.5

I can telnet to 192.168.1.3:1494 on any system hooked up onto VLAN2 but when
I try to access the server from the external interface of the WRT54G it just
times out.

Can someone help me with this routing issue please?

You may have to post your question to comp.security.firewalls if you do not
get an answer in this NG.

Duane