Jose Varghese wrote:
> Keeping it simple: Physical segregation and only Internet access

Sorry, but I don't agree. If you deploy and maintain the network you'll
be liable for any legal action against you in case of misuse. Making
reality simpler is not the same as creating simple solutions.

I would consider studying solutions #2 or #3 from John Adams's message.
There are some guides/howtos out there that show how to configure such

Best regards,
firewall-wizards mailing list