[northlandboy]

You don't do rules like access lists, with different access lists on different interfaces. Instead, you have one set of rules, that applies for all interfaces, regardless of direction.

If you want specific outbound rules, configure them something like this:

<my internal IP> -> <destination> -> <services> ACCEPT

Outgoing ANY ANY rules are generally considered very poor form, and I would advise against configuring your rulebase that way. Restricting outbound traffic will help you identify, amongst other things, worm-infected systems.