Linjo, I disagree with the comment about any proper firewall will do that, firewalls are software based and susceptible to breach through bugs and poor config. As for the your TCP comment; of course I know that, that's the idea of diode, it's unidirectional, so traffic can go in and not back out. It's normally done through hardware but in this case it's a research job.
If anyone has any real suggestions or solutions to this then please feel free to post.