You can even, if you've got the parts lying around, make your own hardware fw. Just run a minimal linux dist on an old machine with 2 NICs...no worries

Someone clueless enough to run windows on a fixed IP address fully exposed with no firewall isn't going to have the skills to build and configure a Linux box as a firewall.