You can make your machine completly silent with one of following solutions:
drop any outgoing packets from firewall
don't configure any IP addresses on interfaces where you want it to be silent
There are two issues: handling marks properly, and missing routes.
mark and connmark
The routing stack knows about the firewall mark (aka fwmark aka mark). It doesn't know anything about Netfilter's ...