add haveged to feed the kernel entropy pool; this ensures better cryptographic keys; e.g. for fastd
re-enable dnsmasq dns forwarder to allow the router to be used as DNS server in the private network. This way we can resolve Freifunk specific domains using /etc/dnsmasq.conf. Access to port 53 from the public network need to be blocked otherwise it might be possible to get the public IP address of the router using a DNS server on the internet. dnsmasq doesn't seem to have an option to exclude interfaces for DNS only.