How to block outgoing traffic?

[nicqq]

hello; we have two dmz's, dmz-arena and dmz-debi interfaces and 1 pppoe as wan.

how to only allow tcp/443&80 outgoing traffic for hosts on dmz-debi via wan?

dmz-arena has not restriction for outgoing traffic

[caplam]

Not sure but when you setup a rule it's better to put it on the first interface hit by the traffic.
So in that case on dmz-debi in.
Supposing you don't have a rule on that interface that allow other traffic, you can make this one
action: pass
direction: in
protocol: tcp
source: dmz-debi net
destination: !Private_Networks
dest port: webserver (webserver should be created first as an alias for port group 80&443)

I wonder what should be the utility of that rule.
Edit: it could be different according the other rules already in place.

[nicqq]

how do you do that !

[Patrick M. Hausen]

Firewall > Rules > pick the interface > click on the little "+" sign to add a rule ...

[BrandyWine]

Well, OPNsense does allow WAN-In WAN-Out LAN-In and LAN-out rules (lan wan just common names, etc). Other than traffic from fw itself, why would I use WAN-Out LAN-Out rule?