Hello,
Yes you need NAT, firewall is not necessary.
You can get info on how Coovachilli should be configured from here: http://coova.org/CoovaChilli
