The Windows XP firewall is a good start but it will only help you out so much.
In order to have a fully functional firewall, you need it to monitor both incoming and outgoing packets. The XP firewall only monitors incoming packets, which is only half of what you need. Again, its better than nothing but I'd get something like Zone Alarm. There a few free firewall programs out there that you should look intol