table ip t {
	chain c {
		type filter hook input priority mangle; policy accept;
		iif "lo" ct mark & 0x000000ff == 0x00000010 meta mark set ct mark >> 8
	}
}