DNS resolving timed out when connected to OpenVPN

Some clients, for example Android devices, don’t support Tap. Tun requires extra firewall rules to accomplish the same as Tap.