A machine claims it routes all traffic through a VPN, with a kill switch that stays up if the tunnel dies. Some of them are lying. Read the config, then call it: LEAKS or HOLDS. Six boxes.