FireHOL is a straight-forward tool to create a firewall. The tool 'firehol-wizard' (see man page) prepares an example script that has to be edited and to eventually replace the original. The start flag in /etc/defaults/firehol needs to be set to "yes".