best firewall for a web server

[Iv Ray]

We will be running a web server -

- FreeBSD 8.x
- Apache 2.x
- php 5.x
- PostgreSQL 8.x
- Postfix 2.x

- The server will run nearly 98% of the time below 25% load (no high performance firewall is needed).
- Access to the server will be done only via ssh w/ key (there will be no public ftp, etc.).

I read several threads on FreeBSD Questions and checked the Handbook, and my conclusion is that PF seems the most straightforward for such "classic" situation.

Am I right?

Thanks,
Iv