You can either use a linux box and configure ip tables (friggin pain in the ass)
or go buy a linksys router and set it to deny all incoming packets. that will work. There about 50 or so bucks.