Sorry, but if you had to create an All outbound from int to ext, then
you've done something wrong on your rule. The firewall client is great,
but it is not a necessity -- of course, you would want it to ensure
authenticated access to rules based on domain membership for non-web
traffic, but that's ...

[ more ]