Firewalls just don't shield you against every type of attack. My philosophy is to keep my boxes up-to-date with MS updates, disable all unneeded services - and no firewall. My boxes have NEVER been compromised. Firewalls can be a lot more trouble than they're worth.