fix qos dependency on iptables-mod-conntrack-extra for CONNMARK (closes: #4035)