Confused - iTunes - Locked down Media Server

[DigitalDick]

Hi,

So I have this setup:

BrightBox 2 VDSL modem ( No bridge option ) DMZ setup for PF Sense BOX on 192.168.48.7 - PFSense on 192.168.1.1 for LAN and 192.168.48.7 on WAN- Local Network

So I have a Media Server which I am trying to lock down everything on, including internet. So to block internet I have blocked ports 80 and 443. However I believe iTunes Store uses these ports. So the questions is….

How do I lock down my Media Server, ie no internet on port 80 and 443 yet still pass through iTunes on port 80 and 443 ?

Am I missing something here ?

Thanks in advance people :)

Rich

[KOM]

pfSense does not have any network application control, so you can't set it up so that App X can use 80/443 but not App Y, or at least not that I'm aware of.  What you can try to do is to collect all of the known IP addresses for iTunes and then craft an alias to use in a firewall rule that allows access to just those IP addresses via 80/443.