Limit NAT client’s inbound width(if I use iptables to mark classid related to that client ip)?

But I’ve tested that mark is before NAT.

How?