table ip t { chain c { type filter hook output priority filter; policy accept; ct mark set ip dscp << 2 | 0x10 } }