1 2 3 4 5 6
table ip t { chain c { type filter hook input priority mangle; policy accept; iif "lo" ct mark & 0x000000ff == 0x00000010 meta mark set ct mark >> 8 } }
