firewall3: drop support for automatic NOTRACK rules