1) The router will just complicate the green setup - switch to a hub for green keep the router for blue (wireless).
2) Install a 3rd NIC in your IPCop for the DMZ.
Sorry, did not read question properly. If the problem is security on the wireless interface (no WPA or WEP enabled on your router) IPCop will not help - outsiders can still hack the wireless network. IpCop can seperate the wired and wireless network segments but you could end up needing 4 NICs if you want a DMZ: NIC 1 red, NIC 2 green, NIC 3 Blue and, if required, NIC 4 orange (DMZ).
Last edited by mickza; 05-31-2007 at 05:36 AM.