I think AppArmor would be a better use-case for that. With it you can write a security profile containing a rule like: network tcp src 192.168.1.1:80 dst 1

I think AppArmor would be a better use-case for that. With it you can write a security profile containing a rule like: network tcp src 192.168.1.1:80 dst 170.1.1.0:80 Networking access is just the start, you can restrict many other stuff, like access to dbus, files, signals, etc.