The Windows firewall is a fine place to start, but there are better options.