I thought, of course, to compile my own version but I no longer have an environment for compiling kde3 stuff, apparently. Fact is, there should be (or should have been) a template file which could be edited rather than hard-coding all of this in sources. Right now, best to run non-root, save the file, edit it and save to /etc/rc.firewall.