Set Tunnelblick to ignore manually pre-set DNS server addresses?

[Spencer L]

We have a user who, when connecting to Tunnelblick, sees an error message pop up saying something like "one or more possible problems with dns were found DNS server address 127.0.0.1 is not a public address.."

We know, DNSFilter sets this as a DNS server on their network when installed on their machine, I believe. We do not want to remove/change this. Is there any way to have Tunnelblick ignore this manually set DNS address in the user's Network preferences so that they do not see the error message pop up? Additionally, so that Tunnelblick does not even use 127.0.0.1 to query when connected and instead uses it's own configuration?

[Tunnelblick developer]

There are a two separate issues:

• The warning that "DNS server address 127.0.0.1 is not a public address" can be suppressed with a "Do not warn me about this again" checkbox. However, because of a bug, that checkbox does not appear in some versions of Tunnelblick, including the currently stable version, 3.8.4a. The bug was fixed in 3.8.5beta02.

• If I understand you correctly, the user's DNS is manually set to 127.0.0.1 by DNSFIlter.
  
  Because DNS is manually set, by default Tunnelblick ignores any settings in the OpenVPN configuration file or pushed by the OpenVPN server that would change DNS settings during the time the VPN is active, which I think is what you want.
  
  If you instead want Tunnelblick to change the the manually set DNS address(es) while the VPN is connected if the OpenVPN configuration file contains DNS settings or they are pushed by the OpenVPN server, then put a check in the "Allow changes to manually-set network settings" checkbox. It's on the "Connecting & Disconnecting" tab of Tunnelblick's "Advanced" settings. (Be sure to select the configuration(s) the change should be applied to in the list on the left of the "Configurations" panel of Tunnelblick's "VPN Details" window before making the change.)