John, that's right when the emerge happened iptables was built as a program not a module. It's probably some useflag that needs setting correctly for this to build as a module.