The easy way: 1. temporarly turn off flood prevention and portscan detection (or create an exception)
2. run nmap against the external interface from outside Or you can use an online scanner such as 'shields up', but they only scan common ports, iirc.
The hard way: netstat -an Will show all ports with listening services. Then filter that for whichever interface (e.g. External), and then check for related firewall rules with iptables -n -L