All Linux distros come with pretty much everything you need from a security point of view, IPTABLES is usually the default, and can be auto configured by most distros during the install, or afterwards via editing config files, command line, or GUI tools, in linux there's always a lot of choice...