ant wrote:
> Hello,
>
> I'm looking for a software like Zone Alarm (personal firewall)
> that works on Linux. Can you help me?

I think you can make your own. Tweak the firewall to log all
rejected packets. Have a monitor process watch the log and
pop up a dialog box to ask you if you want to allow. If yes,
the rules are tweaked in RAM (thus this session only) or both
RAM and file (iptables file used at boot time).

The port-knocking software already does this, you may be able
to adapt it to your needs.

-Wayne