a. The program defaults to Allow all Programs and Allow all System apps. The default should follow the Default Deny firewall configuration principle. So that Everything is denied until you issue approval. No Root Firewall defaults correctly right from the start. But with this app, you have to manually set the correct defaults. If you don't, everything is allowed, and you will wonder why malware is capable to talking to their owners, but you have a firewall in place. In other words, you are seriously screwed. b. The Network logs allow you to set rules, but the rules are Only Domain rules or IP address rules derived from the log. If you want to ban the app/system-app from ever talking, you have to remember the app name, go to App rules, and find it and set your rule. Or if you want to allow the app to talk forever, you have to do the same. The only use of banning an app/system-app by Domain or IP address is when the app talks to several different sites, and you want to ban just a particular one. c. Changing the DNS to a custom ip address, has No Effect. According to Other Settings > Debug Info. The current DNS still lists the default one set by the DHCP Server/Router.
