I need some help. I am planning on seting up K12LTSP at the hospital I work at in order to have it as an educational room for the school here on campus. For those unfamiliar with it, K12LTSP is based on Fedora Core 4, and the clients are all thin.

Here's what I am confused at:
The LTSP server will have 2 NIC's. eth0 for the "education" network, and eth1 which will connect to the hospital's LAN in order to provide Internet access.

How can I lock it down to where none of the clients will be able to touch the network at the hospital, and that the only thing they will be able to get outside of the "education" network is Internet access through eth1? The IP schemes for the education network and the hospital LAN will both be different.

I hope I explained it clearly. Thanks everyone!

Does eth1 have to be on the hospital lan? I would have the education network sitting off a seperate vlan to split them up. If it needs to be on the lan, you could try putting a bridged firewall between the edu network and hospital lan and have a policy to drop packets destined for the local lan.