External Network behind Server 2008 R2 slow

Hi, 

Here is my setup:

Netgear Router (DGN2200M-100PES) providing ADSL access. Static IP 10.0.0.254
Router connected to Server 2008 R2 NIC 1 (10.0.0.200) and NAT'ted using RRAS to NIC 2 (192.168.1.200). NIC 2 is connected to the Internal Network.
DNS, DHCP also installed.

Any machines that are behind Server 2008 R2 has slow internet access. The machine was running a Linux Server distribution and worked fine, so it is not a hardware issue. Any machines connected directly to the Netgear Router have quick internet access. Internal resources (Intranet, File Shares ect) are fast.

Slow internet access means taking long to load pages that, when connected directly to Router, load quickly. DNS seems to be fine, as "Monitoring Test" passes instantly and I also have Forwarders set up (to Google Public DNS).

Here is an IP config of the Server:

C:\Users\Administrator>ipconfig /all

Windows IP Configuration

   Host Name . . . . . . . . . . . . : SERVER
   Primary Dns Suffix  . . . . . . . : SERVER08.OFFICE
   Node Type . . . . . . . . . . . . : Hybrid
   IP Routing Enabled. . . . . . . . : Yes
   WINS Proxy Enabled. . . . . . . . : No
   DNS Suffix Search List. . . . . . : SERVER08.OFFICE

Ethernet adapter Internal:

   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : ZyXEL GN680-T Gigabit PCI Adapter
   Physical Address. . . . . . . . . : 00-19-CB-D6-6B-F7
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes
   IPv4 Address. . . . . . . . . . . : 192.168.1.200(Preferred)
   Subnet Mask . . . . . . . . . . . : 255.255.255.0
   Default Gateway . . . . . . . . . : 0.0.0.0
   DNS Servers . . . . . . . . . . . : 192.168.1.200
   NetBIOS over Tcpip. . . . . . . . : Enabled

Ethernet adapter External:

   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : Intel(R) 82567LF-2 Gigabit Network Connection
   Physical Address. . . . . . . . . : 00-27-0E-02-75-D2
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes
   Link-local IPv6 Address . . . . . : fe80::b8c6:1a02:9cc2:792e%11(Preferred)
   IPv4 Address. . . . . . . . . . . : 10.0.0.200(Preferred)
   Subnet Mask . . . . . . . . . . . : 255.255.255.0
   Default Gateway . . . . . . . . . : 10.0.0.254
   DHCPv6 IAID . . . . . . . . . . . : 234891022
   DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-18-A6-83-96-00-27-0E-02-75-D2
   DNS Servers . . . . . . . . . . . : 192.168.1.200
   NetBIOS over Tcpip. . . . . . . . : Enabled

Tunnel adapter isatap.{48703D42-3627-45CC-B08C-B42A5560E048}:

   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : Microsoft ISATAP Adapter
   Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes

Tunnel adapter Local Area Connection* 9:

   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : Teredo Tunneling Pseudo-Interface
   Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes

Tunnel adapter isatap.{D64CF5DF-BAD3-4DD4-9D39-EB620176A728}:

   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : Microsoft ISATAP Adapter #2
   Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes

Here is an IP config of a machine's NIC behind the Server (Wireless is not relevant, wired machines are the same)

Wireless LAN adapter Wireless Network Connection:

   Connection-specific DNS Suffix  . : SERVER08.OFFICE
   Description . . . . . . . . . . . : Intel(R) WiFi Link 5100 AGN
   Physical Address. . . . . . . . . : 00-21-5D-D7-A6-AC
   DHCP Enabled. . . . . . . . . . . : Yes
   Autoconfiguration Enabled . . . . : Yes
   Link-local IPv6 Address . . . . . : fe80::2073:d0ef:a824:e28%19(Preferred)
   IPv4 Address. . . . . . . . . . . : 192.168.1.11(Preferred)
   Subnet Mask . . . . . . . . . . . : 255.255.255.0
   Lease Obtained. . . . . . . . . . : 12 February 2013 01:14:04 PM
   Lease Expires . . . . . . . . . . : 13 February 2013 01:14:05 PM
   Default Gateway . . . . . . . . . : 192.168.1.200
   DHCP Server . . . . . . . . . . . : 192.168.1.200
   DHCPv6 IAID . . . . . . . . . . . : 184557917
   DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-17-56-5C-4C-00-1D-BA-64-EC-14
   DNS Servers . . . . . . . . . . . : 192.168.1.200
   NetBIOS over Tcpip. . . . . . . . : Enabled

Here is a Traceroute to 8.8.8.8 from a machine behind Server 2008 R2 (the 2nd hop always times out).
Please ignore the high MS to 8.8.8.8 at the end, the address is half way across the world. Websites hosted locally (in the same country, 22ms ping) are also slow.

C:\Users\Michael>tracert 8.8.8.8

Tracing route to google-public-dns-a.google.com [8.8.8.8]
over a maximum of 30 hops:

  1     2 ms     *        1 ms  touchbasepro.office [192.168.1.200]
  2     *        *        *     Request timed out.
  3    43 ms    30 ms    25 ms  196-210-138-129.dynamic.isadsl.co.za [196.210.138.129]
  4     *       41 ms    27 ms  196.38.73.85
  5    34 ms    72 ms     *     cdsl2-rba-vl150.ip.isnet.net [196.38.73.9]
  6    25 ms    33 ms    33 ms  196.26.0.61
  7    28 ms    29 ms    28 ms  168.209.1.179
  8    51 ms     *       24 ms  74.125.49.66
  9   221 ms   207 ms   205 ms  72.14.232.102
 10   211 ms   203 ms   220 ms  209.85.253.10
 11   229 ms   213 ms   350 ms  72.14.232.76
 12   221 ms   223 ms   202 ms  209.85.254.114
 13     *        *        *     Request timed out.
 14   240 ms   251 ms   211 ms  google-public-dns-a.google.com [8.8.8.8]