Firewalling utilities

Does anybody have any experience using mason when setting up a firewall?
I was wondering if anyone had any experience using it or had some
recommendations on some good utilities on setting up a good firewall. I
have snort, and portsentry and am looking for any other utilities that
would be good for protecting against my webserver.

I understand that a poorly setup firewall is worse than not having one
at all and with that being said any input would be greatly appreciated
:)