Since this is a Linux clone: > They are useless against real Trojans Highly doubt anyone will consider it as a way of protecting against trojans. > In worst

Since this is a Linux clone: > They are useless against real Trojans Highly doubt anyone will consider it as a way of protecting against trojans. > In worst case it's blocking applications from self updating which can lead to a less secure system. Since this is mostly done on the package management level, it makes sense to use a tool similar to Little Snitch. You're detecting how apps phone home and nothing more. I would take it a step further and disallow some apps to connect to the Internet at all, and allow some apps to contact only certain web pages. Seems like a good way without spending a lot of time playing with firewalls.