Any linux distribution should be able to handle this situation.
But the situation seems specialized enough that it won't be covered by easy point-and-click interfaces.
The details on internet connection differ a bit based on whether the RoadRunner modem also is a router that hands out private IP addresses, or simply a modem (in that case the internet connection would be configured on the first BEFSR41 at the moment). But the way I see it a PC with 4 ethernet cards and 1 wireless AP should be enough.
You simply set up 3 subnets:
Code:
private : 172.16.10.0/24
public : 172.16.20.0/24
wireless : 172.16.30.0/24
The first ethernet card on the PC connects to the RoadRunner modem. Details on how this one should be configured depend, like I said above, on what the modem does exactly.
The second ethernet card connects to the church offices (through a switch)
The third ethernet card connects to the church school (also through a switch)
The fourth ethernet card connects to the wireless AP.
IP address configuration:
Code:
eth1 gets static IP 172.16.10.1
eth2 gets static IP 172.16.20.1
eth3 gets static IP 172.16.30.1
A DHCP server is configured on the PC, handing out addresses for the 172.16.10.0 172.16.20.0 and 172.16.30.0 networks. It hands out IP addresses ending in numbers 34-254, so numbers 2-33 can be used for printers and maybe other thing that are going to need static IP addresses.
Code:
The printer in the church offices gets static IP 172.16.10.5
The printer in the church school gets static IP 172.16.20.5
At the moment simple routing between the networks is possible (it will be set up with the internet connection).
A firewall (with iptables) will prevent unwanted accesses:
Code:
iptables -A FORWARD -m state --state RELATED,ESTABLISHED -j ACCEPT # allow packets for existing connections
iptables -A FORWARD -o eth0 -j ACCEPT # allow opening new connections to the internet
iptables -A FORWARD -i eth2 -d 172.16.10.5 -j ACCEPT # allow opening new connections to office printer from school
iptables -A FORWARD -i eth1 -d 172.16.20.5 -j ACCEPT # allow opening new connections to school printer from office
iptables -P FORWARD DROP # prohibit all the rest
I can work out the internet access when I know if the PC must set up the connection or if it must be left to the RR modem.
ASCII art network diagram:
Code:
Internet
|
|
RoadRunner modem
|
|
PC
/|\
/ | \
/ | \
/ | \
/ | \
Church School Wireless
switch switch AP ^
| | | | | | |
PC PC PC PC PC PC Laptop
All this can get expensive based on whether you have to buy switches or not.
If you happen to have (or get a donation) a managed switch, you can make do with one or 2 network cards on the PC and VLANs, but I'm probably getting far ahead of myself here.