for some reason all vms connected to my sys-vpn (mullvad running openvpn) just fail anything dns-related, only thing i can do is ping 1.1.1.1 but nothing more than that
this is my rc.local in sys-vpn
nft flush chain qubes dnat-dns
nft add rule ip qubes dnat-dns meta l4proto { tcp, udp } ip daddr { 10.139.1.1, 10.139.1.2 } th dport 53 dnat to 10.6.0.1
Since you mentioned OpenVPN, Mullvad uses different subnets based on the port used. For example, if you use 10.6.0.1 as you did in your post but the port changes, the subnet could change to 10.7.x.x, which would break DNS requests. To avoid this issue, either use this script or stick to a specific port in the app.