Is there really no firewall software that blocks everything by default and pops up to ask you for permission each time a new app tries to connect outbound for the first time?