well, anything that runs ontop of *nix would be a good start....

what is the point of having the best firewall when your base OS is trash?