The initscript for Conntrackd (part of conntrack-tools) checks net.netfilter.nf_conntrack_tcp_be_liberal and refuses to load conntrackd if it's not zero. However, this has been totally unnecessary since kernel 2.6.22 - please remove the check from the initscript or at least make it only apply to <2.6.22
*** This bug has been marked as a duplicate of bug 405919 ***