Can't be sure, but the way it seems is that by default when you mark a packet it carries on as per 'passthrough'... If you then have an accept action (rather than mark-packet) looking for that mark then it'll stop, otherwise it'll carry on until it finds another rule that applies to it, where it the...