DNS lookups fail in sys-firewall linked VMs after network change

This happens whenever I change the route that a router downstream of me connects to.

AppVMs connected to sys-firewall can reach the Internet (pinging IPs direct) but all DNS lookups fail.

AppVMs connected to proxy VMs connected to wireguard VPNs are fine for DNS.

I don’t have time today to do a full bug report but it has been an annoying recurring issue. Does anyone know? Thanks.