Simple methodology to prevent certain Linux desktop programs having access to the public Internet via systemd and iptables