https://tech.iprock.com/archives/4936
The Linux equivalent of Little Snitch, ZoneAlarm, and similar per-application firewalls?