I have a bsd server that I am simply using for a file server at home, I have no reason for it to have internet access expect for fetching updates and ssh.

I have tried to go through an understand different types of firewalls that are out there for bsd and I am a little lost - what is stated in the bsd handbook.

What I would like to do is block all ports except for samba, ssh and what is used for portsnap.

What would be the best firewall for this?