The Firestarter firewall can do all of this for you, by the way...

Code:
sudo apt-get install firestarter
Its just a frontend to iptables.

In its preferences, set "internet connected device" to the internet, and "local network device" to the local device. Then enable NAT and DHCP if you want...