Reading this thread an old idea, which I actually put on hold some time ago, came back into my mind.
During this time I planned to "harden" my VPN connection, that means block any traffic that is not going through the vpn tunnel (especially in case the vpn tunnel is disconnected unintentionally).
My wish was, to set up iptables rules with starting the vpn connection by VPNmanager and flush these rules only when the vpn is disconnected (intentionally) by VPNmanager.
In this case the real IP would never be exposed, even if the vpn tunnel gets lost by whatever reason.
zomboided : Do you think, such kind of "general" iptables rules thing would make sense and could be integrated into your great addon?