First of all, search some of the other posts out there. There is a plethora of info on both ipchains and iptables here in the forum. Secondly, you should probably read up on what ipchains is, how it works, and some of the configuration options. The best place to start is
http://www.linuxdoc.org - go to the alphabetical HTML listing and find ipchains. Lastly, the first range you've specified includes the second range. If you want to allow 65.0.0.0 - 65.254.254.254 (255 is broadcast and should never be specified if avoidable) you could simply add:
ipchains -P input DENY
ipchains -A input -i $EXT_IF -s 65.0.0.0/8 -j ACCEPT
This is the polar opposite of what you setup, but would allow only 65. addresses to access your machine. If anybody else out there has better info, please post it.