looks good
+ ip rule del prio 9990
+ ip rule add from 0/0 fwmark 8 table main prio 9990
+ iptables -t mangle -D PREROUTING -i br0 -p tcp -m set --set NETFLIX dst,dst -j MARK --set-mark 8
+ iptables -t mangle -A PREROUTING -i br0 -p tcp -m set --set NETFLIX dst,dst -j MARK --set-mark 8
+...