05.md: refine dnsmasq rules