You don't have any connection tracking with mark. If you want some you've got to use CONNMARK.
Where can I find a few good working examples for CONNMARK? I haven't yet been able to use the CONNMARK patch on my firewall the way I tried to.
Greetings,
Hanno
