I was playing with YaCy a little, and there is an "Intranet" mode. As far as I can make out, this can operate in a distributed way, but behind the firewall. I didn't look into how to set it up in great detail yet though, was playing with web search.