Conflict in System Name Resolution Routes
The operating system's network stack sometimes prioritizes standard network adapters or the home router gateway when sending UDP packets to port 53. Consequently, the actual traffic flows through the secure channel, but the list of requested resource addresses is intercepted by the local ISP DNS server.
How to Fix a Leak
- Enable built-in DNS Leak Protection in your VPN client settings
- Manually assign public, independent DNS servers (Cloudflare 1.1.1.1, Quad9) in your operating system settings
- Run comprehensive diagnostics on testing web resources like dnsleaktest while connected