Using firestarter, I like to have all ports that I don't need closed... If you go to the tab "Policy" and select "Outgoing traffic Policy", two radio buttoned options appear. Set this to "Allow, block specific traffic". Now head back to the "Policy for incoming traffic". There should be no rules defined there. If you right-click one of the empty areas, you'll be able to specify rules for traffic allowance. If you right-click and add through the upper area you'll be able to allow entire hosts access to all ports. If you use the lower area, you'll be able to create rules per port. These are the settings I usually use:
Allowed services (lower area):
- SSH (port 22)
- Samba (port 137-139 445)
Ports are automatically selected when selecting the name of the service in the "Add new rule" window.
If you find anything blocked, check the "Events/log" tab and see which service/port is being blocked. (You might need to refresh by clicking the blue rounded arrow at the top) Then add a new rule for that service/port.
P.S. I'd post screenshots but I'm afraid they'd all be in Dutch. Let me know if you need help finding things!