Apache mod_ssl and DNS question

Ok, 2 questions, I'll start with the DNS one.

I have a network with several servers in it, all who use private network addresses (192.168.*.*) and I want to setup one to serve content to the outside world. Here's the catch, one of my servers has the outside number and serves the domain (www.domain.com), I want to setup a new server with a private network address and give it a sub-domain (server1.domain.com). The domain server is running Debian and has BIND on it. The private network one will run e-smith. Can this somewhat odd setup be done?

Second question on Apache with mod_ssl. Is there anyway to set it up so that it will allow any of the private addresses (192.168.*.* and 10.10.*.*) to view the pages on it, but when an address outside that range requests a page, it insists on SSL and asks for a username and password.

I realise these might seem a bit wierd, but if anyone has a clue, could they let me know?

Thanks
SeaWolf