I have to post this on my phone
Logged out, logged in again, cannot get web pages. Can ping to ips, cannot resolve names with ping. Can resolve names with nslookup. Browsing doesn't work obviously but I can get to remote ips like repo locations.
???
REALLY seems like DNS but DNS is working with nslookup and I can change the nameserver in etc/resolv.conf and see nslookup using different nameserver but still no dice when using ping/browser
Any ideas??
It's probably leaving around DNS entries that only works while on the VPN, and depending which program is making the DNS query, it may or may not fall back to a public server.