Защита Dnsmasq от DNS Amplification

# vim /etc/dnsmasq.conf

no-resolv
dns-forward-max=0

# service dnsmasq restart

Проверка:
# dig @$IP +edns=0 +ignore +noadflag com ANY