I was also going to mention this (https://doc.pfsense.org/index.php/DNS_Rebinding_Protections https://doc.pfsense.org/index.php/DNS_Rebinding_Protections has a

I was also going to mention this (https://doc.pfsense.org/index.php/DNS_Rebinding_Protections https://doc.pfsense.org/index.php/DNS_Rebinding_Protections has a few notes). dnsmasq has many other uses like tunneling all your DNS traffic through dnscrypt (https://www.opendns.com/about/innovations/dnscrypt/ https://www.opendns.com/about/innovations/dnscrypt/)