Hello.
Any idea what this does not work for me ? 
I'm using LEDE Reboot 17.01.4
I've these interfaces
# ifconfig
br-lan
inet addr:192.168.1.1 Bcast:192.168.1.255 Mask:255.255.255.0
eth0
inet addr:192.168.2.2 Bcast:192.168.2.255 Mask:255.255.255.0
eth2
inet addr:192.168.1.60 Bcast:192.168.1.255 Mask:255.255.255.0
In /etc/config/dhcp I have this
config dnsmasq
option domainneeded '1'
option boguspriv '1'
option localise_queries '1'
option rebind_protection '1'
option rebind_localhost '1'
option local '/lan/'
option domain 'lan'
option expandhosts '1'
option authoritative '1'
option readethers '1'
option leasefile '/tmp/dhcp.leases'
option resolvfile '/tmp/resolv.conf.auto'
option localservice '1'
option nonwildcard '0'
list interface 'lan'
list notinterface 'dedicated'
Dnsmasq is started this way
/usr/sbin/dnsmasq -C /var/etc/dnsmasq.conf.cfg02411c -k -x /var/run/dnsmasq/dnsmasq.cfg02411c.pid
In '/var/etc/dnsmasq.conf.cfg02411c' I have
interface=br-lan
except-interface=eth2
Which is good, but it stills listen on eth2
# nmap -p 53 192.168.1.60
Host is up (0.00052s latency).
PORT STATE SERVICE
53/tcp open domain
I've try everything, with only "interface" or only "except-interface", in config/dhcp or directly in dnsmasq.conf but nothing works, Dnsmasq seems to ignore these settings.
I'm stuck on this since yesterday and it's driving me crazy.
Thanks for your help.