The biggest problem with setting up things like that is to know which network-card is which and how to run the cables.

And then you want to have a webserver on the inner computer... I just copy and paste a ipchain-rule for that ;-)