This is absolutely great news! Just the other week I was again researching every option, from Subgraph OS's fw-daemon to the Douane firewall.