Typicaly you would want to deny everything, then go back and enable the things that you need. The most common is port 80.