1 2 3 4 5 6
table ip t { chain c { type filter hook output priority filter; policy accept; ct mark set ct mark & 0xffff0000 | meta mark & 0x0000ffff } }