Actually I'm using a hub, only because it was dirt cheap. How you have it set up now is fine. I just find it annoying to have to turn on the internet sharing pc for the others to be able to surf the net. When using it like this all transfers go through the ICS computer using
NAT, therefore the firewall software on it will monitor everything on the lan.