I use APF on my webservers.

http://rfxnetworks.com/apf.php

Its not a GUI, you have to edit a a config file, but I like it, cause you tell it the ports you want to be open, and it closes the rest. I really like it, cause I usually install it remotely. Therefore, I can edit what ports to allow before I start it up so that it doesn't lock out SSH.