if the requirement is just email, seems like it would be quite feasible to set something up so that the MTA on the administrative system tunnels the email to the MTA of something network-connected in a non-tcp&#x2F;ip kind of way (PTP microwave&#x2F;laser link, printer-carrier pigeon-scanner combo, ...) that just passes the message over while remaining air-gapped