[][kernel][mt7988][hnat][Add support for preventing hardware acceleration via skb mark checking]

[Description]
Add support for preventing hardware acceleration with skb mark checking

Without this patch, the users are unable to prevent specific
packets from being accelerated by hardware.

Example: Use iptables to mark packets with SIP=$SIP and DIP=$DIP
	to prevent them from being accelerated by hardware
	(to BIND state).

iptables -t mangle -A PREROUTING -s $SIP -d $DIP -j MARK --set-mark 0x99

[Release-log]
N/A


Change-Id: Ib41c6f922188fd9492fc45d95e152cc362d61d6e
Reviewed-on: https://gerrit.mediatek.inc/c/openwrt/feeds/mtk_openwrt_feeds/+/8254622
2 files changed