Rethink: DNS + Firewall + VPN