[Users] NFQUEUE in VE

[U.Mutlu]

I need to use, in a VE, an app that uses libnetfilter_queue (ie. the NFQUEUE target of iptables).
Which module do I need to specify in vz.cfg (IPTABLES="...") ?

I tried the following modules

find /lib/modules/ -iname "*queu*" -ls
   /lib/modules/2.6.32-5-openvz-amd64/kernel/drivers/md/dm-queue-length.ko
   /lib/modules/2.6.32-5-openvz-amd64/kernel/net/ipv6/netfilter/ip6_queue.ko
   /lib/modules/2.6.32-5-openvz-amd64/kernel/net/netfilter/nfnetlink_queue.ko
   /lib/modules/2.6.32-5-openvz-amd64/kernel/net/netfilter/xt_NFQUEUE.ko
   /lib/modules/2.6.32-5-openvz-amd64/kernel/net/ipv4/netfilter/ip_queue.k

but vzctl gives such errors/warnings, and the app cannot access the NFQUEUE queue:
   Warning: Unknown iptable module: nfnetlink_queue, skipped

The same app on the HN works fine.
So, how can I use NFQUEUE on the VE ?