I built it myself from that config last night. Let me doublecheck.

Nope. Definitely set that way.

I'll point out that CONFIG_NETFILTER is not a module, nor, according to menuconfig, can it be.

I'm gonna try to enable some of the netfilter-related config stuff and see if that helps. (Taking shots in the dark now.)