Try Filseclab for a free firewall.

I just loaded it on this W2K box. Failed the nmap test at first, but some config'ing passes it.
Takes some finagling to stealth the thing, but it's got a nice interface and seems emminently configurable.