Indeed, but best is always a good hardware firewall.