When split DNS is used for a local caching nameserver, make sure that reverse DNS queries for hosts within the VPN tunnel are directed to the VPN's nameservers, not to the public upstream nameservers.