[paxswill]

In addition to ipfw, Lion includes pf (off by default though, you need to modify a launchd plist to enable it).