ipf, Sunscreen or ?

I would really like to get a software firewall running on some of my sun 
boxes but was burned awhile back by ipf (could have been a 
misconfiguration on my part but I never got the chance to research). I 
don't need to do anything fancy, just block certain ports by subnet and 
leave others open. I started reading the documentation on Sunscreen from 
sun docs and wasn't horribly excited about it - I most definitely 
wouldn't run apache just to get a GUI.

Any thoughts? experiences?

TIA,
Chris