Get dnsmasq to work properly with NetworkManager, VPNs, etc using openresolv

dnsmasq.md

/etc/dnsmasq.conf:

listen-address=::1,127.0.0.1
interface=lo
conf-dir=/etc/dnsmasq.d
bind-interfaces

/etc/dnsmasq.d/openresolv.conf:

conf-file=/etc/dnsmasq-conf.conf
resolv-file=/etc/dnsmasq-resolv.conf

Default nameservers, if any, can go in /etc/dnsmasq.d/default.conf:

server=1.1.1.1
server=1.0.0.1

/etc/NetworkManager/NetworkManager.conf:

[main]
rc-manager=resolvconf

Run resolvconf -u once to generate config files. Restart all services.

/etc/resolv.conf should then look like the following:

# Generated by resolvconf
search sif.ee
nameserver ::1
nameserver 127.0.0.1
options trust-ad