Too early start dnsmasq via rc.d in some cases leads dnsmasq failed to create listening socket. Often met case is starting dnsmasq before openvpn with listen on tun iface leads to fail. For now rcorder places 'dnsmasq' before 'openvpn'. Solution is "START_LATE" config option like it done in dns/bind99 (See: dns/bind99/pkg-help) ports r388211
We cannot fix this for all users. Either you need interfaces to launch Dnsmasq on, as in your case, others may need Dnsmasq to launch the VPN tunnel daemon in the first place. Consider not binding Dnsmasq to interfaces, or restart it after the VPN is up.
Suggested "START_LATE" option is not 'fix for all users'. It's config option offed by default. From pkg-help in Bind: "Most of the time, BIND needs to start early in the boot process. Enable this if BIND starts too early for you and you need it to start later." Don't see why it isn't applicable by dnsmasq.
(In reply to Matthias Andree from comment #1) Suggested "START_LATE" option is not 'fix for all users'. It's config option offed by default. From pkg-help in Bind: "Most of the time, BIND needs to start early in the boot process. Enable this if BIND starts too early for you and you need it to start later." Don't see why it isn't applicable by dnsmasq.
The question is not whether it weren't applicable, but why it were necessary. dnsmasq normally binds to the wildcard address so I don't see why it needs to start after openvpn. Plus you can configure openvpn to restart dnsmasq, see the "--up cmd" option.