As a follow-up, guard-dog is a very good GUI frontend to iptables for newbies to the whole ipchains, etc.