a good firewall

Hay /comp/,

What's your favorite firewall program?
I have zonealarm and IMO it is not so great.
After tweaking it to allow minimal traffic to/from my computer, it ran fine for months until all of a sudden it started giving me Generic Host Process Blocked messages from various DNS caches from my ISP. 

>>15 so you're saying if you have a router/firewall you don't need a software firewall, and if you don't have a router/firewall you're fucked even with a software firewall.

Am I right?