I just compiled and installed kernel 2.6.21 using the .config I used with 2.6.18 as a base. The problem I'm having is firestarter blocks packets according to the policy I had set up, but while the number of 'Serious' hits (i.e. SMTP, SSH) is non-zero, the 'Total' is zero.

I'm pretty sure this is a kernel 'Netfilter' configuration issue, as the kernel config symbols seem to change a little each time, but I don't know which module needs to be included or excluded. If anybody has experienced this or similar problem please let me know. Thanks.