a good firewall

Hay /comp/,

What's your favorite firewall program?
I have zonealarm and IMO it is not so great.
After tweaking it to allow minimal traffic to/from my computer, it ran fine for months until all of a sudden it started giving me Generic Host Process Blocked messages from various DNS caches from my ISP. 

I know my threats and I know what protection I need. I don't work in a corporate environment and I don't need a mainframe with specific entry-exit details. Believing you need a hardware firewall with corporate security is not only ignorant, it's pathetic. Once again, Unix users take the necessity and practicality factors and burn them to the ground.