General Questions

Hello,

as I understand it's recommended to be specific what traffic to allow and end the list
with a block all rule.


Situation/example:
e.g.: Firefox (from WXP-clients) should be allowed to access the Mozilla site (63.245.213.12).


Questions:
Is the following rule for such a situation/requirement a good idea:


- Action: "Pass"
- Interface: "LAN"
- Protocol: "any" 
- Source: "any"
- Destination Type: (here I don't know what to select among the following choices:)

  (single host or alias / Network / WAN-address / LAN subnet / PPTP clients / OUT   subnet)



Thank's a lot in advanve for any help!


John


PS:
Of corse I am trying that rule myself but because my "block all rule that is not explicitly allowed" is probably not working the way it should, I am unsure ...