Restrict pfSense dnsmasq (DNS Forwarder) to specific interfaces to free port 53 on other interfaces for port forwarding. Use when: (1) pfSense blocks port 53 NAT port forward because dnsmasq is listen
.claude/skills/pfsense-dnsmasq-interface-binding/SKILL.md(master)