I knew that OSX had a builtin firewall which was more than sufficient as protection but i came across it today and noticed it had the lock on to prevent changes and it was turned off. It must have been so by default
Turn in on, and if you want an outgoing firewall get Little Snitch. You could also turn on stealth mode, it makes you invisible on the internet (sort of).