Go with that...its the best thing you can do. Most, if not all packets will be dropped at the router, and if anything makes it through...your other firewall will block them. I used to get scanned all...