As a huge fan of simplewall [0] by Henry++ on Windows, I'm looking forward to testing OpenSnitch on Debian, it looks like it could be the former's counterpart.
and for TFA, that's also nice. and i think, if it works on debian, it could be made work on vast majority of other distros.