I'm pretty sure the built in XP one actually does most of what you want. I used to use Zone Alarm but stopped a few years ago because there was some bug where it would suddenly just disconnect everything and only a reboot would fix it. I just use the built in XP one but have a proper firewall on my gateway.