diff --git a/recipes-extra/dnsmasq/dnsmasq.inc b/recipes-extra/dnsmasq/dnsmasq.inc
index d390ca0..d988f1c 100644
--- a/recipes-extra/dnsmasq/dnsmasq.inc
+++ b/recipes-extra/dnsmasq/dnsmasq.inc
@@ -15,7 +15,7 @@ SRC_URI = "http://www.thekelleys.org.uk/dnsmasq/${@['archive/', ''][float(d.getV
 
 inherit pkgconfig update-rc.d systemd
 
-PR = "r2"
+PR = "r3"
 
 INITSCRIPT_NAME = "dnsmasq"
 INITSCRIPT_PARAMS = "defaults"
diff --git a/recipes-extra/dnsmasq/files/sysmocom-idu/dnsmasq.conf b/recipes-extra/dnsmasq/files/sysmocom-idu/dnsmasq.conf
index 8d4e754..42a1b59 100755
--- a/recipes-extra/dnsmasq/files/sysmocom-idu/dnsmasq.conf
+++ b/recipes-extra/dnsmasq/files/sysmocom-idu/dnsmasq.conf
@@ -57,6 +57,10 @@ no-resolv
 # non-public domains.
 #server=/localnet/192.168.0.1
 
+# Add neptune as upstream DNS resolver.  This will be DNATed by our
+# firewall script the corresponding internal address depending on the outgoing interface
+server=5.9.81.48
+
 # Add local-only domains here, queries in these domains are answered
 # from /etc/hosts or DHCP only.
 #local=/localnet/