>Thanks, Mark. It sounds like they may be more vulnerable than they know, unless they are running some other software. DSL Modems and hubs don't really screen out anything. This is basically the kind of setting at home I was warned against. It sounds like each of their machines has a external IP address, meaning if I knew what it was I could see their machine from where I am right now. I know there is software one can use to see how many "hits" your machine is getting and my understanding is evil-doers put out probes to find machines unprotected and know how to exploit this. Hence the need for firewalls.
>
>Anyway, I am going to be doing a lot of this over the next couple months so I'll share all my stumblings here for the amusement of others and post whatever solutions I find as well.>

I've installed routers for DSL and Road Runner and they both included firewalling software. For a small installation (less than 100 pcs) Linksys dsl/cable router is great. By default it denies access to every port. You have to open them individually. It only costs around $150.00 Bell South, also known as BS pushes their $350 Caymen router. It's no better than the linksys.