dnsmasq: Add conntrack support in the full variant