Your config looks good so one idea can be that you have firewall rules filtering incoming traffic toward udp port 67 If that is not your case then can you see incoming dhcp requests with tcpdump while NOT see respective outgoing dhcp replies? If so, are there any messages from dnsmasq in your log files?