Your kernel, iptables source and patch-o-matic versions are too old: oldest supported kernel is 2.4.23, iptables is 1.2.10 (from cvs). And definitely use newer pom-ng.
Since this has been asked before, and I have some RPMS on hand...
I've made 2.4.22-1.2149.nptl.pptp available at: http://isoar.ca/ftp/~andrewm/redhat/RPMS http://isoar.ca/ftp/~andrewm/redhat/SRPMS The required updated iptables can also be found there.
I've tested this kernel against Intel's Centrino VPN test suite on an Intel provided validation system, and it passed. An Intel rep should be by the office next week for a spot-check, so the kernel should gain certification *knocks on wood*
For a newer kernel, my hacks to the spec file for patch-o-matic can be used to build your own RPMS. The iptables package just needs to be re-compiled against the updated kernel headers.
-- Andrew E. Mileski