The string patch is totally removed from the patch-o-matic-ng, even for 2.4 kernel. I did not check the newer 2.4 kernel source, is it because it has been accepted into the kernel ? But the netfilter home pages still list the string patch ..... Cheers.