To be clear I just wanted to help the op. I don’t have any issues with DSCPCLASSIFY. I’m using it and everything works as it should. My isp doesn’t mark my incoming packets so it’s hard for me to test the op’s use case. I would have to set up two routers with the upstream router marking packets and not washing them.
No, with DSCPCLASSIFY DSCPs are also restored before from conntrack.