Thank You for explanation, and sory that i didn’t pointed that I’ve already created:
/etc/e-smith/templates-custom/etc/dnsmasq.conf
with only bind-interfaces in this file shorewall doesn’t start, or is there a diference between my template and Yours?
My is:
bind-interfaces
interface=br0
but would be great if there’s a more “good looking” fix 
without those side effects.
Will You conssider a better solution for that?
Also we must conssider that this fix is proposed on libvirtd website:
https://wiki.libvirt.org/page/Libvirtd_and_dnsmasq
Edit:
Is seems it works in this way:
default: bind wildcard 0.0.0.0 and all interfaces (allow dynamic interfaces, not work with multiple dnsmasq)
bind-interfaces bind individual interfaces only if specified e.g interface=eth0 (not work with dynamic interfaces, work with multiple dnsmasq)
bind-dynamic binds individual interfaces even if the appear dynamicaly( allow dynamic interfaces, work with multiple dnsmasq)
so we should use:
bind-dynamic if available then DNSmaskq and libvirt:DNSmasq starts at boot properly - it seems it’s working for now. I think it’s worth to test.