anything not port forwarded shouldn't hit your machine, you should also increase the firewall security to maximum
Inbound Policy: Reject. Remote Administration settings will override the security inbound policy. Outbound Policy: Reject. Outbound access is allowed to the following services: Telnet, FTP, HTTP, HTTPS, DNS, IMAP, POP3 and SMTP.