Just to point out that there is a school of thought that once you have a properly configuerd hardware firewall a software firewall is surplus to requirements and a waste of system reasorces. The greater the number of services running on a machine the less secure the machine becomes.