Is there an application level firewall that can block outgoing connection for Linux without using containers? Last I checked, there wasn't. If not, can I build one using BPF?..