Surely it's about how you configure the firewall though? If you just give everything that pops up full access to the Internet, you might as well just uninstall the firewall. Very few applications have full access to the Internet on my PC - the majority are restricted to the trusted zone or certain servers. Finely tuned

I'm using ZoneAlarm Pro.