Reminds me of good old Kerio Personal Firewall on Windows back in the 90s. If the UI gets some more love, I see ebpfsnitch take off like a rocket :)
It also has the option to see the location of the executable trying to access the web and to also upload a hash of the file to VirusTotal.
I have been using this back before when it was a paid program (I think it was only $15 for lifetime use) and before it was purchased by MalwareBytes.
I no longer use any Windows computers but I install it on all my friends and families Windows PC’s.
I really wish there was something similar for Linux.
That was my first thought as well. Back then Kerio Personal Firewall was a godsend, and seeing live how much software (which on windows was 99.9% closed) was attempting to phone home behind the user, became an eye opener to many of us.
(Linux 5.7.0-1-amd64 #1 SMP Debian 5.7.6-1 (2020-06-24)
It installed flawlessly after satisfying the libnetfilter-queue1 dependency, currently I'm playing with it, I like the granularity that allows blocking/allowing different domains accesses from within a process, such as for example a tab in Firefox. I'm curious to test it in the next days with Windows closed software run under WINE to see what they do under the hood. So far it seems really well made, I believe it would deserve a full HN article.