Every time something on my computer tries to contact an external host or an external host tries to contact my computer I would like to be asked if I authorize this and if I would like to create a rule to silently allow or block all the connections like that (and choose/customize the attributes that will be used to identify them) in future.
I don't mind if the rule can't be application-specific, protocol/port/host specificity is enough for me.