yes, you are right, ip_conntrack is needed, I selected it but for some reason it was not built. so I did kernel menuconfig as you suggested and still had same problem. Turned out xt_state is also needed, but I could not select those from the Freetz menu. I had to make the following changes to...