it is possible that you have the user-space shared library (what you saw
under /lib/iptables/...), but you lack the matching kernel module.
Yes you are right. This netfilter module is missing from the standard kernel image on my system ( linux-image-2.6.17-2-686)
Sagi - it should be easy to build your own variation on debian's kernel using kernel-package and linux-tree-2.6.17
--Amos
