腹黒い茶 says to YSITD
add action=mark-connection chain=prerouting new-connection-mark=dynamic-static-1 passthrough=yes src-address=10.121.31.242 add action=mark-connection chain=prerouting dst-address=10.121.31.242 new-connection-mark=dynamic-static-1 passthrough=yes ???