I've had good luck with Firestarter. It's really straight forward and easy to use. There was one thing that irritated me about it though. It would start at boot time, but instead of automatically showing up somewhere on the desktop, you had to explicitly run it to see if any unwelcome packets were picked up. Not that big of a deal, but a bit annoying.