The built in application based firewall is fine for most users, as mentioned above.
The strongest firewall is called IPFW, which is a UNIX firewall and is included in OS X, but is disabled by default.
It's easy to configure by downloading "WaterRoof".