There is a small applet that demonstrates linux-firewalling (iptables) located int http://www.citadec.com/FirewallGenerator.html

I suggest to have a look at it. At least if you're new to firewalling you may get some clue from output.