a good firewall

Hay /comp/,

What's your favorite firewall program?
I have zonealarm and IMO it is not so great.
After tweaking it to allow minimal traffic to/from my computer, it ran fine for months until all of a sudden it started giving me Generic Host Process Blocked messages from various DNS caches from my ISP. 

>>5
It's not elitism, it's simple reality. Believing a software firewall protects you is ignorant. I advise you to read the following:

http://www.securityfocus.com/infocus/1839
http://www.securityfocus.com/infocus/1840

As for windows versus unix... well, unix has good seperation between user and root. While windows can do this, nobody does, because it is really, really painful.