net: add a sysctl to reflect the fwmark on replies - from grouper