Hacker News Reader

Can't you use a split tunnel to do this without a blacklist?

Not a VPN. DNS blacklist at the O/S level. Mostly as an antiviral/antiphishing defense.

Virtualbox gets around it just fine. =)

Yes. OpenVPN makes it simple enough that I could figure out how to modify the default configuration I was handed.