The ip rules to exempt DNS traffic are not removed when the flag is turned off. #176
Description
From an unrelated debugging I found out the rules added in #114 are not cleaned up properly when the DNS exempt flag is turned off.
e.g. We would still see these two rules (29999 and 30000) dangling:
root@gke-XXX:~# ip rule
9: from all fwmark 0x200/0xf00 lookup 2004
100: from all lookup local
29999: from all dport 53 lookup main
30000: from all sport 53 lookup main
32766: from all lookup main
32767: from all lookup default