caused that bug by which firewall code was not working if configured into kernel and worked only as lkm. Now this must be fixed...Sorry guys..
1) Firewall is not subdivided on forwarding / blocking chains anymore.Actually only one chain left-it was the blocking one. 2) LKM support.ip_fwdef.c is function pointers definition and goes into kernel along with all INET stuff.