Knowing that Debian doesn't come with SELinux or msec working,
it should at least have a Firewall.    Why not.
Is the below OK or have I overlooked a better one ?
firestarter, a GNOME application oriented towards end-users that includes a wizard useful to quickly setup firewall rules. The application includes a GUI to be able to monitor when a firewall rule blocks traffic. 
THX
Patrick