The most common (& therefore well known by the kids you want to protect from) free firewall is: ZoneAlarm

Service to disable:
-All servers if not required (web, ftp)
(A frw rule could be to drop packet with ports 0-3K for packets destinated to your own address)
-Netbios
-...