*aaarghl* - the problem was me, working too much with braindead products from other companies plus thinking too technical. Just phoned with Astaro, and the solution is SO SIMPLE!
Just define a network entity for the firewall (appropriate interface) and add a ´packet filter rule specifically including the fw entity defined above in the "from" field. The web frontend automatically puts it into the OUTPUT chain.
Of course this couldn't work in the first place - it's too simple... [;)]
*aaarghl* - the problem was me, working too much with braindead products from other companies plus thinking too technical. Just phoned with Astaro, and the solution is SO SIMPLE!
Just define a network entity for the firewall (appropriate interface) and add a ´packet filter rule specifically including the fw entity defined above in the "from" field. The web frontend automatically puts it into the OUTPUT chain.
Of course this couldn't work in the first place - it's too simple... [;)]