What do you really need to accomplish from outside the firewall ? For example, if you want to get an XP remote desktop behind the firewall, your source and dest. port would be 3389 (default port for RDP) with the dest. IP address of XP station running RDP. Also remember, the service you wish to connect to must know how to route the packets back to the source (static routes/default gateway).
Bill