http://portforward.com/english/route...GC/default.htm
However, I don't think a firewall will block viruses or malware etc.
If the user clicks on every link, mail, without thinking, he will be infected.
A linux firewall or any firewall for that matter will not change that.
If he realy wants a firewall, you can:
Use the firewall and portblocking from the router
or install an old computer with linux and 2 networkcards between the router and the internal network.