Maybe I'm against the grain in this one, but I don't see a lot of point in software firewalls for computers connected behind NAT'ing routers, since NAT destroys the end-to-end connectivity in the first place. So long as you aren't set up as the DMZ host, you are protected from almost everything anyway, just because of the way the routing works out.
*shrug*