It is so easy and dangerous to mess up setting the firewall from scratch, why mess with it.

Use the free, awesome CSF (configserver firewall) instead.

http://www.configserver.com/cp/csf.html