rules: fix device and chain usage for DSCP/MARK targets