As expected. No, I don't think it's a shortcoming -- the route allowed IPs option is basically a simplified method of adding routes to the main routing table. If it is not enabled, you must do it manually.
With DNS, I didn't expect that to be a primary issue, but wanted to make sure that wouldn't cause the impression of a failed connection even though it was working.
Needless to say, please discard these keys and use a fresh set should you actually deploy this across the internet. I'm sure you knew that, but just worth reiterating.
If your problem is solved, please consider marking this topic as [Solved]. See How to mark a topic as [Solved] for a short how-to.