If you're looking for a monitoring firewall for Mac OS X (something like Windows' ZoneAlarm which asks if a given app should be allowed to access a given remote host/port), check out Little Snitch. (Symantec's marketing literature implies that they've added this functionality to the latest version of Norton Personal Firewall, but it was just released and I haven't gotten to play with it yet.)