hmm... you think it's firewall that's the only thing needing to be set?
might be right for domain workstations...