Newbie

[nanopico]

If I want to have only web service functional the following firewall rules are right and sufficient:

TCP pass->if LAN->port any-> dest any->port 80->gw * and
UDP pass->if LAN->port any-> dest any->port 53->gw *
prot any->block->if LAN->port any-> dest any->port any->gw *  ?

What about ACK and SYN packets?

[hoba]

You should consider adding tcp 443 (https) too but besides that your rules seem to be ok.

Please add new posts with a more descriptive topic next time.