How to block outgoing traffic?

[nicqq]

hello; we have two dmz's, dmz-arena and dmz-debi interfaces and 1 pppoe as wan.

how to only allow tcp/443&80 outgoing traffic for hosts on dmz-debi via wan?

dmz-arena has not restriction for outgoing traffic