Do you use dnscrypt-proxy or do you think it's unnecessary? I don't know how to configure it with dnsmasq. I also don't know what to do with port 9040 since I'm not using the transparent torification so I commented that out in my endtorrc. Which one of your stuff requires the use of port 9040?