The First Law of Firewalls:
No software firewall product shall be offered for sale if, once installed on the recomended platform, the firewall remains stupidly easy to hack.
A product shall not claim to be in compliance with this rule if, in order to comply, copious patches have to be applied to the host operating system.
Any company which persists in offering a product in violation of this rule will be subjected to heavy fines and constant state-sponsored public ridicule.