I, personally, hate editing iptables config files by hand. There are quite a few GUI front-end / configurators for iptables firewalls available. I would recommend firestarter, guarddog/quidedog, or fwbuilder (in order of difficulty/power). I think all three are available via apt-get install ... R.Parr, RHCE Temporal Arts