BSD n00b needs to block incoming SQL on 3306

[renolinux]

Hi, I suppose an introduction is necessary. I'm a long time linux admin but one of my customers has BSD boxes. I've figured most everything out except IPFW. Every time I try to implement it, I lock myself out of the server. I've followed 2 or 3 tutorials on setting up an all openfirewall that you can close down to whatever you want, but I always lock out all connections to all ports.

I just need to limit connections to port 3306 to a handful of IP's. What is the best way to go about this?

Thank you very much for your help.