The text 2f218af44acc, as Debian 10 (Buster) shipped it.
set a stateful mark from the connmark group
firehol-connmark(5) on Linux now