bastille fierwall are good but not the best....... There are a lot of scripts there make the firewall stronger.....

IF you whant the perfect fierwall then take a look at iptabels (littel program) you can set a lot of stuff there...
Allow Deny and stuff like that.....
bastille and iptables work together.......

Surf the net for documentation about iptabels.....