Are the any products for M$ Windows Platforms that can drop/refuse packets that meet a certain requirements?

AnalogX offers a nice Packet Monitor, but can not drop/refuse the packets- only log them... If this doesn’t make any sense I will try to rephrase my question later…

I'd like to run the packets through some rules based on Packet Header Contents and Body Contents?

Oh yeah- I’m on Win2k...