can anyone reccomend a lightweight firewall *vista*?

you don’t need one dude.

A hardware NAT is just fine for incoming traffic.

Unless you want to monitor outgoing traffic to the net, you don’t need a firewall.