dnsmasq: add and enable DNS rebind protections