Yeah, I was somewhat dismayed to see Little Snitch getting so much attention on mastodon despite it not being free software. I don’t see the appeal.

OpenSnitch does the job quite well. Things in debian are mostly well-behaved, but it’s caught quite a few games running under wine that were up to no good.