The text bc33ae4e7063, as Debian 11 (Bullseye) shipped it.
set a stateful mark from the connmark group
firehol-connmark(5) on Linux now