go for IPCOP as hardwarefirewall ! runs on a indipendent system . forget windows xp firewall.
imho a hardwarefirewall is more secure than a softwarefirewall.