On a minor side note, from my experiences, DCC does not use UDP, so when port forwarding, you should only need to port forward your DCC ports on TCP only.
And yes, definately use a firewall, even something as simple at hte Windows XP firewall :P It definately works. Im behind a router, and that's all I use