getting started with iptables?

iptables is already installed
must be root to manipulate iptables rules
iptables rules are lost on boot: script them
rules are organized by chains
iptables rules are followed in order, from top to bottom
format is complex to say the least.
see this slide for example script with comments
Pro Tip: /etc/init.d/iptables stop #resets firewall rules