I know that firewalls is very good like stopping portscanning and trojans and things, but firewalls isn't stopping normal web-site exploits like this exploit: http://www.securitytracker.com/alert...r/1003874.html

So is there some "smart" firewalls which can stop the real job?