I don't think I need more complicated script.. I understand iproute2 and routing in linux quite well.. and this should work. My question was rather if I need to make any more OS tweaking (maybe in /proc/sys/net/ipv4 or whatever). Or if there is something blocking fwmark installed by default.