Firewall and FTP server

I have a small network… running NT 4 and want to install a good but affordable “hardware” firewall… any suggestions?
Also I want to set up an FTP server… where does that go.. within the firewall or before it?

I know I could upgrade to Windows 2000 but am not convinced that this would greatly improve my security.

Ideas… suggestions… warnings?