vpnc works. nat? network gods have mercy (noob)

[nemesis01]

I have emerged vpnc, and set up the config file. It works great. I can connect to my network at work. Here is my setup and what I am trying to do.

2+ computers. 1 of the comps is a router/gateway with dual nics. 1 hardware router. (I have a few static ip's with my isp)

The HW Router is what connects all my comps together at GW 10.10.10.5. I have one external connection to my HW Router and another seperate external connection to my gentoo router box.

gentoo router box:
eth0 10.10.10.25
eth1 [external ip] (call it XIP)

added static route to HW Router:
Destination Lan IP: 192.168.250.0
Subnet Mask: 255.255.255.0
Default Gateway: 10.10.10.25
Metric: 0
interface: LAN

1. I want to activate the tun device on eth1.
2. I want my other computers to be nat/masq'ed in to the tun device.
3. I don't want the tun/vpn device to go through eth0 which has my gateway of 10.10.10.5 (the HW Router). Looking for all traffic for the tunnel to go out on eth1.
4. Drop packets from my work that is coming in to tun that I did not initiate. (maybe it does this already?)
5. Drop all packets not tun related directed at eth1

When I am connected, my ifconfig is this: