yes but outbound is not really needed unless you are already infected and then its too late

All depends on how risky a user you are, i like surfing the darkside so i need virtualy a bulletproof setup this is what i use and no mailware has defeated it yet

Comodo firewall with hips disabled
defensewall(policy based hips)
a squared antimailware
sandboxie(run firefox sandboxed in a virtual enviroment)
Acronis true image(if all else fails go back to an entire disc backup)

if running windows you can harden the system by running in a lua and other things as well but will make things difficult if you download a lot

I havnt payed a penny for any of my security as i just google and there is always free giveaways out there