If your firewall is denying the traffic, what would you hope to accomplish by changing the firewall? A deny is a deny; the firewall is doing its job, and you want to change that?
You could do that, but, if this firewall is connected to the Internet, you will end up with far too many specific deny statements. Typically, the firewall will deny any traffic initiated from outside unless you have specifically added exceptions. I don't see much to gain from all the work.
Holes are automatically created for outside traffic when a traffic flow is originated from the inside. The hole is created for a specific flow from the a specific address and port to a specific address and port. Even with those restrictions, the hole only lasts so long before being closed. You could open a specific hole with a firewall exception to allow any outside traffic to a specific address/port in your network to allow things like a web server to be accessed from outside.
This is a very broad subject that cannot properly be discussed in this forum, and product or resource recommendations are specifically off-topic for this forum.