Here's pretty much an exact answer to your quesion. Hope it helps!!

http://www.robertgraham.com/pubs/firewall-seen.html#10