if you're not too sure what you're doing, i'd suggest using a firewall builder like firestarter, which does all that stuff for you.
a line like...
iptabes -t filter -A INPUT -p tcp -s 0/0 -d *NET* --dport 25 -j ACCEPT
where *NET* is your interface/mask values, should do the trick tho.
|