Application-wise network filtering on Linux?