Martin Petráček authored 7 years ago and Michal Hrusecky committed 7 years ago

iptables table mangle POSTROUTING/PREROUTING is not triggered for
traffic incoming to/outgoing from localhost, so CONNMARK was not set

this fix moves setting CONNMARK to filter:suricata table