Use UFW for your firewall, or GUFW as a GUI.Also get AppArmor, which restricts applications to only access certain resources. It comes installed by default on Trisquel, but you will have to activate the profiles. See the Ubuntu wiki:
https://wiki.ubuntu.com/AppArmor
I don't know of any GUI for AppArmor, though.
