I have wiresock service installed with nat mode and the vpn works fine. However, on the pc which is running service, plain unencrypted dns queries to 220.127.116.11 are getting timed out, but pinging 18.104.22.168 works. I checked using both nslookup and Resolve-DnsName.
Only 22.214.171.124 is affected and 126.96.36.199, 188.8.131.52 work fine. It only happens with nat mode.