app-based firewall
 

I was wondering, is there any sort of an app-based firewall solution for linux (a la zonealarm for windows, where you can decide that you only wish to give access to a specific program).

Please don't mention --cmd-owner in iptables, it's hardly adequate since it can easily be cheated...

There are apps for setting up firewalls (shorewall & guarddog) but theres nothing ala zonealarm.

Firewalls within Linux are port based not app based simply because that makes more sense in a linux env. Because the way zonealarm works would be very difficult if not impossible to use, or implement.

Plus we don't get the stuff that zonealarm is designed to stop. (Trojans and spyware.)

Have a look at
http://www.nufw.org/index.php3?lang=en
or the GRsecurity kernel patches.


Cheers,
Tink