net: tcp_probe: allow more advanced ingress filtering by mark