NE: All DNS queries must first go through the VPN's DNS servers

Signed-off-by: Roopesh Chander <roop@roopc.net>

diff --git a/WireGuard/WireGuardNetworkExtension/PacketTunnelSettingsGenerator.swift b/WireGuard/WireGuardNetworkExtension/PacketTunnelSettingsGenerator.swift
index d26d802e43b473c847e9f8ce3ddd1f4d6d8c00e5..40071964b65ff38021af9972954e1dc8f032bc8d 100644 (file)
--- a/WireGuard/WireGuardNetworkExtension/PacketTunnelSettingsGenerator.swift
+++ b/WireGuard/WireGuardNetworkExtension/PacketTunnelSettingsGenerator.swift
@@ -75,7 +75,9 @@ class PacketTunnelSettingsGenerator {
         // DNS
 
         let dnsServerStrings = tunnelConfiguration.interface.dns.map { $0.stringRepresentation() }
-        networkSettings.dnsSettings = NEDNSSettings(servers: dnsServerStrings)
+        let dnsSettings = NEDNSSettings(servers: dnsServerStrings)
+        dnsSettings.matchDomains = [""] // All DNS queries must first go through the VPN's DNS
+        networkSettings.dnsSettings = dnsSettings
 
         // MTU