I think Little Snitch does a good job, but it would be easy to see any leaks at the router/hardware firewall if there's a real concern.