I meant you need to enable that in the kernel, ie. compile, if it's not in it already.
Networking support - Networking options - Network packet filtering (replaces ipchains) - IP netfilter configuration, select what you need. If you're not sure, I don't think it'd hurt to select all of them. Descriptions should explain them a bit.