Instead of redirecting ALL DNS traffic to custom mini DNS, let dnsmasq handle it so it can still resolve LAN names, and point remote web connections to our error page if WAN goes down