Looking for an AFWall+-like application firewall for Linux (per-app LAN/Internet control)

Hi,



I am looking for a Linux application that works similarly to **AFWall+ on Android**.



What I am looking for is a simple GUI where all installed applications are listed, and I can manage their network permissions per application.



Something like:



* Application A → Internet allowed
* Application B → LAN only
* Application C → completely blocked



Basically, I am looking for an application permission manager for network access, not just a traditional firewall where I have to create rules manually.



I have already looked into several solutions:



* **UFW/GUFW** \- useful for traditional firewall rules, but not really what I am looking for because it does not provide an app-based permission list.
* **Firejail/AppArmor** \- can restrict applications, but it is not the simple network permission workflow I am looking for.
* **OpenSnitch** \- interesting, but it is more focused on detecting and approving network connections when applications try to connect.
* **Portmaster** \- probably the closest in terms of features, and it does provide per-application rules, but the workflow is still different from AFWall+. It focuses more on monitoring network activity and managing applications that have been detected making network connections, rather than starting with a list of all installed applications. It is also a bit more resource-intensive than what I am looking for.



What I really like about AFWall+ is the simplicity: open the app, see all installed applications, and manage their network permissions from one place.



I was wondering if there is any lightweight Linux application that provides this kind of workflow.



It does not have to be exactly the same as AFWall+, but I am mainly looking for:



* a simple GUI
* all applications visible from the beginning
* per-application network permissions
* ability to separate LAN access from Internet access if possible



Thanks!

https://redd.it/1vpsodi
@r_linux