How to apply SEP Firewall rules to control access to UNC path?

Hi,

I ahve few questions regarding SEP Firewall. Can someone clarify?

1. How do I set the rules to allow few UNC paths and block the rest? (ex: Want to allow access to \\Mycomany.com\abc\path1 and restrict access to otehr shares.). I tried restricting the above path as DNS host / DNS domain, both didn't work. 

2. Can we use wildcards while specifying DNS host / Domain names?

3. What is the difference between Source/Destination and Local/Remote and how to choose one?

Regards,