Cloudflared DNS client problem

[invisiblewave]

Trying to get cloudflared running on Mint 18.3 and I'm running into difficulties with dnsmasq & resolv. It works fine on my Ubuntu box.
I think the issue is that some combination of dnsmasq and resolv are listening on 127.0.1.1:53, and even if I kill the dnsmasq process, the cloudflared client still can't resolve names.

Before killing dnsmasq, netstat looks like this:
tcp 0 0 127.0.1.1:53 0.0.0.0:* LISTEN -
tcp 0 0 127.0.0.1:53 0.0.0.0:* LISTEN -
udp 0 0 127.0.1.1:53 0.0.0.0:* -
udp 0 0 127.0.0.1:53 0.0.0.0:* -

After changing NetworkManager.conf to comment out dns=dnsmasq, killing the dnsmasq process, and restarting networking & network manager, netstat looks like:
tcp 0 0 127.0.0.1:53 0.0.0.0:* LISTEN -
udp 0 0 127.0.0.1:53 0.0.0.0:* -

The 127.0.1.1 address is no longer listening, but DNS resolution through 127.0.0.1 still doesn't work. I know the cloudflared daemon is working because the dig results show it resolving addresses, but when I run "host -a www.google.com localhost" the connection times out, whereas previously I was getting "error 4(NOTIMP)"