* CONFIG_IP_NF_MATCH_TOS: is not set when it should be. But there is no IP_NF_MATCH_TOS option in either 2.6.27 or .28.
net-firewall/tuxfrw was removed from tree long time ago, closing this