Conseal 9 Firewall:
http://www.signal9.com
My other default FW, when I use GoZilla or such.
At first i didnt think it was a firewall
Thats because it doesnt inform that its blocking
But also traces the attacker a little.
Some strange things i have found are that it loads at the startup
( even if you uncheck that option)
and communicates to the internet from time to time
(IF online)
As ZA does, BI allows logging too, and allows to copy the ip's.
Its online help is very newbie one
Its easy to use
But yet its not the "normal" firewall
Its more like an attack blocker, to unknown ports
The online help indicates the type of attack info about it
It allows too to totally ignore an attacking ip, for security purposes.
Too bad it doesnt block outcoming packets.
When attacked it detects and block the attacker
If it receives a major attack from the same IP, it just ignores it
but i heard that it cant resist medium attacks
the attacker is DNSed, and WHOISed, for your safety