Control traffic originating from pfSense host

[ishmael]

How to control traffic originating from pfSense host?

Example: allow pfSense host to connect only to Internet for NTP and DNS servers, and nothing else.

Firewall rules apply to traffic entering a given pfSense host interface.

Traffic originating from pfSense host itself exits, not enters, interface on pfSense host.

[jimp]

In 1.2.3 you cannot do this.

In 2.0, you can control this via floating rules.

Why do you need to lock down traffic leaving the firewall?

[ishmael]

I want to lock down traffic leaving firewall for same reasons as for all other network devices.

Block all and allow only what is required. And allow-and-log rules to monitor traffic and access with firewall.

Thank you for responding. I will look at 2.0 and floating rules.