Quote:
Courtesy of catch
Firewalls have two uses:
1. Filtering ports, either by packet type or data content.
2. Segregating network traffic.
As you have no need for #1 if you are not running any services and your network topography doesn't call for #2, running a firewall is not only unneeded, but to do so would be a poor choice.
Almost every comment made after that point was speaking of running services, and the fact of the matter is Windows by default has services running. So based on the fact that Windows runs services by default, catch actually did suggest a firewall. He just didn't take into account default services on Windows and assumed that the box would be hardened, which should be first nature with people, but unfortunately it isn't with most people. Pooh's comments about open ports basically goes hand in hand with catch's statements, The ports are open because services are running, both people have therefore suggested a firewall, just in different and slightly skewed ways. You just need to read the details.