Please do not block the local network
With activated VPN the local network is no longer reachable, ie pinging hosts and ssh connections fail.
Bitmask should block leaks to the hosts outside of the local network but not to 192.168..0.0.
Please let me know if more details and the output of specific commands is needed.