The tunnel-all-dns option does not take effect when it is specified in per-user or per-group configuration file.
tunnel-all-dns