Well... avast! Mobile Security includes a firewall for rooted phones.
It does not change any network/wifi configuration in non rooted phones, just scan.
I have a rooted Samsung Nexus with AMS and the firewall installed and running.
When I have tethering problems, I, generally, blame the computer, not the phone (services running into Windows, DHCP, etc.).