I am a paranoid person.

I have closed all outgoing traffic in Firestarter. (Except port 995,80,465). However programs I install could use these ports to submit informations (bank-key) or something like that.

I would like to be able to say that ie only firefox could use port 80, and no other applications (somethings that is (almost) possible in windows with Zone Alarm or Sygate))

On the status-page I can see that Firestarter knows that the active connection is firefox-bin.

However It does not seem possible in firestarter to block on application level.
Or am I just wrong ??

Is there some problem making this hard/imposible ?

Using Firestarter 1.03

The default iptables installation doesn't include support for doing application level filtering, so to my knowledge firestarter can't do filtering based on application. That being said, there is a netfilter extension for filtering traffic based on the command. To access it you'd need to apply the ownercmd patch using patch-o-matic and then do a kernel compile, so in short it's non-trivial. If you want something to do true application layer filtering take a look at Zorp.