output control: dns and timeservers go over tun0