I think this is about how secure you want your system to be. The most secure solution is to run a seperate PC as a hardware firewall (which is what most commercial organisations do).

However, if...