when you have an ondemand VPN configured on an ios device, your DNS requests will leak to your DNS server from your non-VPN'd ip.

i always assumed that ios VPNs were super leaky. i will bring receipts soon.