No it hasnt anything to do with your firewall...
He cant see what you have but you can see what you have.
Thats because he linked a frame to:
file://c:/
thats just an easy trick to fool somebody.