On a Mac, run “scutil --dns” on the command line. This is the level of complexity supported by the native resolver. Many admins prefer the old-style where you

On a Mac, run “scutil --dns” on the command line. This is the level of complexity supported by the native resolver. Many admins prefer the old-style where you can only use one resolver for all domains. OS X permits each connection to have its own resolver configuration, selected using the “domain names” and a priority heuristic. Viscosity implements this as “Split DNS”, where only the domains sent by your VPN server are attached to the VPN connection’s resolver configuration. I assume other VPN clients vary in their behavior, and so this (unsafe) curl | bash guideline is some sort of mechanism that tries to rip apart the priority stack in favor of simply using resolv.conf.