... install -y dnsmasq # groupadd -r dnsmasq && useradd -rg dnsmasq dnsmasq # systemctl enable dnsmasq # systemctl start dnsmasq domain-needed bogus-priv no-hosts dns- forward-max=100... dnsmasq domain-needed bogus-priv no-hosts dns- forward-max=100 cache-size=500 resolv-file=/etc/resolv.dnsmasq no-poll # firewall-cmd permanent add-port=53/tcp # firewall-cmd permanent add-port=53/udp