Alun Jones (Security MVP) wrote in his great blog about a new "so-called" hole in Vista Firewall machanism. To tell the truth, it's not really a hole, but I thought I'd grab your attention. it's not a flaw in the operation of Windows Firewall on Windows Vista. It's a design feature, it makes sense, and it fits in with the principle that the firewall should keep out unsolicited traffic.
this so called feature, allows windows to leave a FTP connection open before and even after you click "block" on the vista firewall pop-up. sounds bad? not very much.
To read more about this "so-called" feature and how to "close" this hole down, read the full article.