Network design

My network have 2 routers with 2 separate subnet, both router connect to a T1 modem to provide Internet connection. The first router consist a Web Server an FTP server, the second router is private network. Users on my private network would like to proccess data on FTP server and Web server. How could I do to enable this security connection on difference subnet and still protect my private network?