EFnet IRC Network Forum

I'm bored in the uni lab and I can't ssh out to my box and connect to my IRC client. So while I'm cursing the restrictive firewall that we have here, I came up with this question:

What's your favourite firewalling solution, and why?

iptables or pf. :)
both powerful and flexible.

so far i'm pretty happy with the little netscreen 5gt i've got under my desk. it's even got some built in virus protection [that i don't really use], and can block patterns in http requests [if i remember correctly]. but, of course, i didn't have to pay for it