Indeed, that gets back to not sane defaults though I suppose. The filet-of-firewall was particularly troubling, Flash and DNS rebinding is all it takes if UPnP is running on your router. This worth read if anyone is interested:

http://www.kb.cert.org/vuls/id/361684