You want one that is application based. I would recommend Sygate Personal Firewall. It has advanced rules too but they don't need to touch those. They just need to allow the apps they want to allow through and then uncheck "act as server" for each one in the advanced properties for each app.