Use lokkit to manage the iptables firewall.  More convenient than working with iptables directly.