Drop * (ICMP/TCP/UDP) allow only a few TCP/443 (https) hosts - easiest way ?

[mocs]

Hello!

I would like to DROP all traffic from LAN to WAN - no matter type of traffic and allow traffic to just a few hosts (with real.domain-names.com and not by IP).

What is the best practice to do this ?