I think AppArmor would be a better use-case for that.

With it you can write a security profile containing a rule like:

   network tcp src 192.168.1.1:80 dst 170.1.1.0:80

Networking access is just the start, you can restrict many other stuff, like access to dbus, files, signals, etc.