:PREROUTING,FORWARD,OUTPUT,POSTROUTING

*mangle

-j CONNSECMARK --restore;=;OK

-j CONNSECMARK --save;=;OK

-j CONNSECMARK;;FAIL