hello; we have two dmz's, dmz-arena and dmz-debi interfaces and 1 pppoe as wan.
how to only allow tcp/443&80 outgoing traffic for hosts on dmz-debi via wan?
dmz-arena has not restriction for outgoing traffic
Not sure but when you setup a rule it's better to put it on the first interface hit by the traffic.
So in that case on dmz-debi in.
Supposing you don't have a rule on that interface that allow other traffic, you can make this one
action: pass
direction: in
protocol: tcp
source: dmz-debi net
destination: !Private_Networks
dest port: webserver (webserver should be created first as an alias for port group 80&443)
I wonder what should be the utility of that rule.
Edit: it could be different according the other rules already in place.
how do you do that !
Firewall > Rules > pick the interface > click on the little "+" sign to add a rule ...
Well, OPNsense does allow WAN-In WAN-Out LAN-In and LAN-out rules (lan wan just common names, etc). Other than traffic from fw itself, why would I use WAN-Out LAN-Out rule?