I am trying to prevent the MT from intercepting DNS requests for hotspot users. I don't want the MT to cache or do anything. I thought this rule may prevent this:

/ip firewall nat add action=accept chain=pre-hotspot dst-port=53 protocol=udp

However, it looks like the MT's DNS cache is still populating. What is the best way to stop the MT from doing any DNS interception at all, and just to use the DNS servers that the hotspot clients receive via DHCP? I do see two additional NAT rules that redirect DNS traffic on the hotspot chain, but I'm not quite sure I understand what they are doing.

Any help would be appreciated.

Thanks.

I think it's ip firewall filter you need. Not nat.