Just a couple of additional points!
Definitely buy a router/modem with an SPI firewall built in, then NAT addresses internally to a statically assigned IP address (check your ISP can give you this otherwise you'll be mucking about with dyndns), this will mean that you can remotely administer...