Sometimes connections go out through the wrong Gateway.

[grimelog]

I'm using Unbound to forward specific websites to DNSmasq, which I use to populate an external alias that sends those connections out through one gateway. On my firewall rulles, I have that rule placed above the rule for routing out my VPN's gateway. All of the default web traffic is supposed to go out over my VPN connection.

Normally, my forwarding rules make me successfully go out without using the VPN; but, on occasion connections still go out over the VPN. Does anyone know what might be causing me to go out the wrong way on occasion?