"Firewalls" are already in the linux kernel. Guarddog is a GUI that lets you configure the iptables. Check and see if there is a
klik for it available. You will need a persistent home to keep it during a reboot tho. I use Kanotix because kilks are already
enabled, Guarddog is already installed and USB /home works (knoppix has usb problems for me).