I really like the AIS firewall set to the auto-decide setting. If you need or want more control, just set the firewall to ask, and it will bug the crap out of you like those firewalls mentioned above.