Fort Firewall is my tool of choice. Each connection requires explicit approval.