If I understand you correctly, it seems to me what you are want to do is something like this:
Create one static NAT address for your firewall, you do that like this:
ip nat inside source static x.x.x.x y.y.y.y
with "x" being your private address and "y" being the public
Then, if you want other machines on the LAN to access the net you will want to create a NAT pool rather than static address translation. I don't know if Winroute will handle the NATing of those addresses, but it may. If that's the case, create your dynamic NAT pool on the firewall. If it doesn't do that, you can create a dynamic pool on the router, or use overload so that internal hosts can still get to the net. Then, you will want to create and apply access-lists to allow/deny the traffic you want to make it to the firewall from the outside, and the type of traffic you want comming from the firewall to pass through to the net. Although you can find out detailed information on access lists at Cisco.com, www.techrepublic.com has a couple of easy to use tutorials for people who aren't "Cisco experts" that explain basic access list theory. That should do it. Good luck
