I used the firewall under Tiger. I'm a big believer in default deny. (Isn't everyone?) So, I was happy to see that Leopard's firewall has the option to allow per-application control over inbound connections.

See Close the Ports for details.