iptables и recent [РЕШЕНО]

почему так ?
iptables -A FORWARD -m recent --name badguy --rcheck --seconds 60 -j DROP
iptables: No chain/target/match by that name.

zgrep STATE /proc/config.gz
...
CONFIG_NETFILTER_XT_MATCH_STATE=y
...

update:
с ядрами перемудрил.