this morning i realized my windows 2000 system has around 20 (yes 20) tcp connctions established to various web sites and irc servers

it's probably a trojan or a worm of some kind....

before i investigate i'd like to cut off all access on all ports besides http access (wanna still be able to browse)

how can i make that happened either from within the OS or open source solutions only