Ive never used a firewall or anti-virus and Ive never once had problems through spyware and/or viruses. I check weekly for spyware with various spyware checkers and have never had a single one.
I do go through a router which I suppose can help to stop attacks. Firewalls aren't everything