dnsmasq: add config option for connmark DNS filtering