Specify table and chain for role::dns::recursor notrack rules

NOTRACK is only valid in raw table and OUTPUT and PREROUTING chains

Change-Id: Iab328adecdd437bc69bda81ed7d0a16988fbda29