table ip t { chain c { type filter hook input priority filter; policy accept; meta mark set ip dscp << 2 | 0x10 } }