-A PREROUTING -i eth1.2 -p tcp -m tcp -m conntrack --ctstate NEW --dport 22 -j CONNMARK --set-mark 0x1
-A PREROUTING -i eth1.3 -p tcp -m tcp -m conntrack --ctstate NEW --dport 22 -j CONNMARK --set-mark 0x2
-A PREROUTING -j CONNMARK --restore-mark