flush ruleset define nic = eth0 table inet mangle { chain prerouting { type filter hook prerouting priority -150; iif $nic ip dscp == cs1 ct mark set 0x01 iif $nic ip dscp == cs2 ct mark set 0x02 } chain postrouting { type filter hook postrouting priority 150; oif $nic ct mark == 0x01 ip dscp set cs1 oif $nic ct mark == 0x02 ip dscp set cs2 } }