Comment 6 for bug 1704288

Do you have your vpn configuration in network-manager so that all traffic should go through it, or do you have "Use this connection only for resources on its network" checked? That's in ipv4-settings->routes, same under ipv6-settings.

Also, I assume your /etc/resolv.conf, *after* connecting to the vpn, still has only one "nameserver" entry and pointing at 127.0.1.1?