Why not to mark packet at mangle postrouting? It does only make sense to use FastTrack on specific (known) connections before they enter filter/other routing chains. Using it afterwards makes no sense at all... We mark whole connection. It is better mark first packet (when connection state is new),...