Workaround CONNMARK failing to mark REDIRECTed 53->5353 DNS packets.