Hello,
Yep, 10.x.y.z is a protected subnet. My router is 10.10.1.1, and subnet mask is 255.0.0.0 The router will accept packets from 10.10.1.x, 10.10.2.x, 10.10.3.x and so forth. Can even do a 10.20.1.x and 10.30.1.x because of the subnetting flexibility.
I do not think that you can get a 192.168.1.1 device to catch a packet from 192.168.4.x because of the subnet mask and the limit of hosts on that network.
Remember, a 192.168.1.x/24 network will only have 253 possible hosts (because .0 refers to the whole network, and .255 is the mask).
All the companies that I have done work for had an internal 10.x network. Matter of fact, one that my sister works at has 10.x and my internal network was 10.x and her VPN would not work because the routing thought that her Citrix servers were located inside of my parent's house. I had to re-do the parents network to 192.x.y.z so that the VPN would route packets through the firewall properly, and stop looking for hospital citrix servers near my parents furnace.
Christian