Have you enabled the “Block Non-VPN Traffic” option? How do you confirm DNS leaks happen?