I've got a SuSE 7.0 box sitting between my home LAN and my DSL ISP. Among other services this host acts as a firewall for the LAN. The clients connect by masquerading or JunkBuster (running on the router) to the internet. Theoretically the FW should keep all the bad boys/girls out by stealthing my ports. How can I make sure that only those apps get out where I say it's OK ? I figure that this is no trivial task but maybe there are solutions to do this. Primarily I use Netscape to browse the Net and do my e-mails. Then I need a few programs to ftp outside. I guess it's a bit tricky to know if any other software tries to establish connections ? Sorry, if this sounds a bit naive but I'm wondering if my firewall thingy is actually any good in the days of spyware thrown at us users "to improve the knowledge about the needs of dear customers".