If you want very secure then nothing beats OpenBSD with its new Firewall software or FreeBSD with ipfilter. Sure, a seperate machine may cost you ~$100, but the software will be free and it will be the most secure option. I personally don't believe in putting firewall software on the machine you want to protect. Too risky.