Detect typosquatting redirect from ISP's DNS and send out a proper NXDOMAIN

[nfriedly]

Here is the feature request: Automatically block upstream DNS hijacking / typosquatting with dnsmasq's bogus-nxdomain