How to log and block all internet access from a program?

I have a binary from an untrusted source, and I would like to block and log any internet access attempt, and see to what server it tries to connect. A first way I though of is using firejail https://wiki.archlinux.org/title/firejail , but I would need to have a fake virtual net interface that logs everything I guess. Do you have other solution, or do you know how to do such a virtual interface ?