Datura Firewall is a frontend for the leaky LineageOS network toggles. It presents options that it's not capable of providing correctly.

Packet-based firewalls are inherently leaky compared to say, the GrapheneOS Network toggle. The Network toggle disables direct socket access like a firewall but also disables indirect access via APIs requiring the INTERNET permission eliminating all known leaks via the OS. 

 Interesting. I'm not entirety ready to jump on graphene but will keep that in mind. Thanks for sharing