IPTables is currently the second best (in my opinion) free/open source firewall available today. IPFilter being #1, but that is more BSDish and commercial UNIXish. And like win2k, if you dont use the root account you dont have to worry about many viruses.