Move dnsmasq start to before ntp, or else the entry for the DNS forwarder in /etc/resolv.conf will always time out.