From one newbie to another... read the docs. :)
In the Admin for WordPress, Options, Discussions, Before a Comment appears, check both boxes.
When you start being bugged by spam bots look into adding some plugins to slow them down. (Sure, we'd like to stop them, but they seem to have more resources than we do)
Hope this helps!