Hi GNUsern
When you have configurated your Network Manager
to import a saved OpenVPN configuration(keys)
CA.cert /User.key/ta.key
and the file containing OpenVPN Client Configuration
(Gateway,Protocol & DNS server) which sets your DNS (From your VPN provider)
In no way should your DNS be your ISP's DNS.
without your VPN activated
#ifconfig
#route
then with your VPN activated
"Route"will show your your default DNS
Check with Gnome-System Log (syslog)the VPN connections & messages
IceCat/Abrowser & Iceweasel leak DNS by default due to WebRTC leak one must
disable WebRTC as indicated
https://www.privacytools.io/
How to disable WebRTC in Firefox
once done
https://ipleak.net/
Your IP address - WebRTC detection
&
DNS Address detection
to change DNS without VPN this here is in French
https://trisquel.info/fr/wiki/changer-les-dns
https://wikileaks.org/wiki/Alternative_DNS