* ale <ale@wwb.cc>, 2016-05-20, 10:26:
I think you could also use AppArmor profiles to filter network access per application in the way you describe.
I don't believe Debian kernels support this: #712451 -- Jakub Wilk