Updated netfilter mark patch

Hi,

Please find attached updated netfilter mark (and QOS tidy up) patch.

It takes into account all the recent feedback, but leaves the
tcp_outgoing_* and clientside_* configuration functions in cache_cf.cc
as discussed on the mailing list.

It remains not fully tested, but is provided for any further comments.

Thanks,

Andy