https://github.com/evilsocket/opensnitch It'd be nice to package the UI and daemon separately, so one could install it on a headless server.