[package] dnsmasq: add and enable DNS rebind protections