Add support for fwmark matches and targets