I am planning on trying out iptables string match support at some point soon and have found this nice HOWTO on getting it compiled into your kernel