[fulafel]

you don't need a firewall as long as you don't turn on remote connections. that's the listen_address option.