Make sure to choose a no-root firewall so that you don't have to root your Android device. Rethink by Celzero is a customizable DNS service and firewall that can detect and block network threats.