Oh yeah, I totally forgot about DNS66 (works in non-root phones) or AdAway (which is what I use, root required). And also there AFWall+ (and probably others) for firewall duties.