Предлагаю заменить в alterator-net-openvpn/backend3/net-openvpn: -dig +short +resolve -s с тем, чтобы не вытягивать почём зря bind-utils.
alterator-net-openvpn-0.8.9-alt1 -> sisyphus: * Fri Dec 21 2012 Mikhail Efremov <sem@altlinux> 0.8.9-alt1 - Added initial GOST support. - Disable LZO by default. - Use 'dev-type' instead of 'dev'. - Use its own CA certificate for each connection (closes: #28203). - Set resolve timeout to 15s. - Use 'resolve' as well as 'dig' (closes: #27560).