Zonealarm is a great free firewall.
I prefer it (I use Zonealarm Pro) to the XP firewall for the added control and feedback.
However, the most important thing to do IMO is to get XP SP2 and refrain from downloading and installing a whole bunch of programs, screen savers, etc. from the net.