rename bat1 to mgmt for coherent naming
relax dnsmasq default config, don't block sending plain hostnames and private ipv4 replies from upstream
allow masquerading over management interface