I have wiresock service installed with nat mode and the vpn works fine. However, on the pc which is running service, plain unencrypted dns queries to 1.1.1.1 are getting timed out, but pinging 1.1.1.1 works. I checked using both nslookup and Resolve-DnsName.
Only 1.1.1.1 is affected and 1.0.0.1, 8.8.8.8 work fine. It only happens with nat mode.