Megan, instead of configurating your E-smith box two on a separate subnet and making it be a gateway between the two subnets to avoid proxy auth, why not just simply add the IP address of E-smith Box #2 to the proxy exclusion list in the web browser on the client machine?
Seems like that would accomplish what you are trying to do with the least amount of effort.
Thanks,
Nathan Fowler