Yes, you do need afirewall. Check this answer that I asked awhile back.
Do I need to run the Network Shield with Zone Alarm? http://forum.avast.com/index.php?topic=9875.0