The best firewall is to disconnect the system from the internet. ;) in all seriousness though, some of the best are free : agnitums outpost (http://agnitum.com/) being one of the best in my opinion....