The pom-ng pptp-conntrack-nat helper (and most other as far as i know) don't apply to kernel 2.6.11.x (yet). With kernel 2.6.10 the pptp-conntrack-nat patch should work fine! I just use general iptables rules, to accept and forward related and esthablised traffic. And load all four modules (or compile them in)