I'm currently using a combination of the Windows Firewall from SP2 and my router. Technically, all I would need is the router, but a second layer of protection isn't a bad thing.

While it's not the best, the Windows Firewall is sufficient for most people. Also, it allows more than just ports, but specific programs, so things like file transfers in IM programs and other things like that will work.