Over the weekend I experimented with installing debian woody, sarge with new installer, Libranet and Knoppix-installer. Then I ran Bastille as above. With Libranet and Knoppix bastille appears to give me "True Stealth" as defined by www.grc.com while the 'real' debian installs failed to be secured by Bastille or any other firewall that I tried.

Can anybody think why this is so?

Am I failing to install a module when I do a regular debian install?