Why is the default gateway spoofed in ubuntu?

Question

openvpn

I installed an extension for network manager for openvpn for convenience, but there were problems:
The default gateway is being replaced
Not registering dns
on win there were no such problems
before

Таблица маршутизации ядра протокола IP
Destination Gateway Genmask Flags Metric Ref Use Iface
default         gate*****l 0.0.0.0         UG    600    0        0 wlp3s0
link-local      *               255.255.0.0     U     1000   0        0 wlp3s0
192.168.1.0     *               255.255.255.0   U     600    0        0 wlp3s0

after

Таблица маршутизации ядра протокола IP
Destination Gateway Genmask Flags Metric Ref Use Iface
default         ga***y         0.0.0.0         UG    50     0        0 tun0
default         gate***.l 0.0.0.0         UG    600    0        0 wlp3s0
10.14.2.0       ga**y         255.255.255.0   UG    50     0        0 tun0
10.214.2.128    gat**ay         255.255.255.128 UG    50     0        0 tun0
link-local      *               255.255.0.0     U     1000   0        0 wlp3s0
178-212-74-137. ga*******l 255.255.255.255 UGH   600    0        0 wlp3s0
192.168.1.0     gat****y         255.255.255.0   UG    50     0        0 tun0
192.168.1.0     *               255.255.255.0   U     600    0        0 wlp3s0
192.168.3.0     *               255.255.255.0   U     50     0        0 tun0

server config

[[email protected] ~]# cat /etc/openvpn/server.conf 
local 192.168.1.5
port 1194
proto tcp
dev tun

cd /etc/openvpn
plugin /usr/lib64/openvpn/plugin/lib/openvpn-auth-ldap.so /etc/openvpn/auth/ldap.conf

username-as-common-name
client-cert-not-required

persist-key

push "route 192.168.1.0 255.255.255.0"
push "route 10.14.2.0 255.255.255.0"
push "route 10.214.2.128 255.255.255.128"
push "dhcp-option DNS 10.214.2.137"
push "dhcp-option WINS 10.214.2.137"
#push "redirect-gateway def1"

tls-server
tls-timeout 10

ca 		ca.crt
cert 		server.crt
key 		server.key 
dh 		dh.pem
tls-auth 	ta.key 0

cipher 		AES-128-CBC   # AES
#cipher 	none
server 		192.168.3.0 255.255.255.0
client-to-client
topology subnet
fast-io
#max-clients 	5

comp-lzo

keepalive 	10 120

status 		/var/log/openvpn/openvpn-status.log 1
status-version 	3

log-append  	/var/log/openvpn/openvpn.log
verb 		0
mute 		20

the client is configured using the gui, but set according to the config.
screenshots

Answer 1

On the client, check the box "Use this connection only for resources on this network"