Use a Hardware Firewall With Unroutable LAN

Advanced topic. But highly recommended.

Many internet access points (cable, DSL, etc) allow the use of a local area network (LAN), which is unroutable.

Using a wireless router is a bad idea. Avoid it whenever possible.

Use a local LAN that with unroutable IP addresses
Your computer should have an IP address of 192.168.0.x or 192.168.1.x

A good unit has the capability for a local LAN, which is unroutable (a few hundred machines can all reach the internet, but only explicitly configured machines can be reached from the internet; there is no way to reach them, since their addresses are all unroutable. The firewall can be configured to route only needed services to specific machines.

Local LAN IP addresses are of the form 192.168.0.x or 192.168.1.x. Such addresses cannot be reached from the internet by default with any half-decent hardware firewall. Netgear, Comcast, etc all have such devices, and they are not expensive