An alternative choice for Android KitKat users with non-rooted phones/netpads, is to use/try the "NoRoot Firewall" app by "Grey Shirts", imho its one of the bes

An alternative choice for Android KitKat users with non-rooted phones/netpads, is to use/try the "NoRoot Firewall" app by "Grey Shirts", imho its one of the best firewall, which uses kitkat-specific internal-VPN-routing module to process & filter network trafffic packets. VPN network traffic filtering process works locally inside the device, no external servers/cloud etc are used. It allows to create multiple (outbound) TCP protocol based rules for each app, based on outbound external/remote domain-names, domains with wildcard subdomains, IP-address, some IP-Net ranges, specific single port, etc. Can show reverse domain names of outbound traffic IP-address, etc. It does not use any excessive or Privacy violating or intrusive Permissions. And, it does not support IPv6 net-pkt filtering, cannot handle ICMP, UDP, MultiCast, etc packets, cannot set inbound specific rules, cannot handle multi ports in same rule, etc. It does crash sometime too often, if there are too many outbound traffic. All mentioned features (and limitations) included & available for use, for free :)