Definitely go fo a separate, dedicated firewall, either hardware one built into your router, as per ORAC, or a software one running on and old PC, if you have one (a P-90 will be perfectly adequate -- yes, a p-90 is
not a typo
, running
www.smoothwall.org or
www.ipcop.org )