table ip t { chain c { type filter hook output priority filter; policy accept; ct mark set ip dscp << 26 | 0x10 } }