fw4: add device iifname/oifname matches to DSCP and MARK rules