> Think something along the lines of "StarDict wants to connect to dict.cn. Allow/Deny?".

That is what opensnitch provides, as do some other detection tools.

https://wiki.debian.org/PrivacyIssues#Detection_tools