All the HTTP you can eat.
Larry Osterman of the WMC Team has a three part blog series about what he needed to allow http.sys to open ports and get through the Windows XP SP2 firewall.Part 1 | Part 2 | Part 3