2 quick firewall questions for FreBSD

[Andy Firman]

First, if one were to deploy FreeBSD 5.3 as a standard
web and email server, would it need a firewall?
I don't see the point because only ports like 25 for 
smtp, 110 for pop, 80 for http, etc... will be listening
and open for connections with or without a firewall.

Second, I would like to replace my Linux gateway running
Shorewall.  Shorewall is a nice package for managing the 
netfilter firewall capabilities of the Linux kernel.
Is there something similar for FreeBSD?