iptables_load() {
  # Set IPTables rules to enable protection
  echo "Creating IPTables firewall rules..."

  # First set the policies to DROP everything
  $IPT -P INPUT DROP
  $IPT -P FORWARD DROP
  $IPT -P OUTPUT DROP

  # Allow loopback communication
  $IPT -A INPUT  -i lo -j ACCEPT
  $IPT -A OUTPUT -o lo -j ACCEPT

  # Allow local network connections
  $IPT -A INPUT  -s 192.168.0.0/16 -d 192.168.0.0/16 -j ACCEPT
  $IPT -A OUTPUT -s 192.168.0.0/16 -d 192.168.0.0/16 -j ACCEPT

  # Allow connections to VPN server
  $IPT -A INPUT  -i eth0 -s $VPNIP/8 -j ACCEPT
  $IPT -A OUTPUT -o eth0 -d $VPNIP/8 -j ACCEPT

  # Allow all connections on the vpn tunnel interface
  $IPT -A INPUT  -i tun0 -j ACCEPT
  $IPT -A OUTPUT -o tun0 -j ACCEPT

  # Drop anything that was not explicitly allowed above
  $IPT -A INPUT   -j DROP
  $IPT -A OUTPUT  -j DROP
  $IPT -A FORWARD -j DROP

  # Zero our counters
  $IPT -Z

  return 0
}

brian:~$ cat /etc/resolvconf.conf 
# Configuration for resolvconf(8)
# See resolvconf.conf(5) for details

resolv_conf=/etc/resolv.conf
# If you run a local name server, you should uncomment the below line and
# configure your subscribers configuration files below.
#name_servers=127.0.0.1