This is probably as basic as it gets but I'm a developer and really have no experience with iptbles.
The only connections I need opened are:
eth0 (outward facing)
- SSL to tomcat (forward port 443 to 8443)
- connection to postgres server
Everything else should be blocked. My current attempts seem to be leaving all other ports open. I wonder what gives.