How do I create a rule to get direct internet on a host
Please refer to the firewall documentation for doing this.