smoothie will do this no problems,
I also recommend schoolguardian from smoothwall if you need something with more options.

put servers that need external access in the DMZ (yellow interface), the internal network in the green and the external network on the red interface