Show policy:

LAN->WAN LAN->DMZ WAN->DMZ WAN->LAN DMZ->LAN DMZ->WAN

Settings for DMZ->WAN policy:

NAT:

Hide source addresses (many-to-one NAT) No NAT - requires public IP addresses on DMZ network.

Select "Add New" below, or select a rule from the list to edit it:

DMZ->WAN Policy
Name   Action   Source   Destination   Service   Move   #1 drop_smb-all Drop Any Any smb-all [Edit] #2 allow_ping-outbound Allow Any Any ping-outbound [Edit] #3 allow_ftp-passthrough Allow Any Any ftp-passthrough [Edit] #4 allow_standard Allow Any Any All Protocols [Edit] [Add new]

If no rule matches, the connection will be denied and logged.