if you want full control over every lan or internet connection in and out bound, including ocx, and sys files etc and registry changes

http://www.zonealarm.com/software/free-firewall/