GregOne thing I found out was some modules may not work with Xen Dom0, because they're compiled for i386. I use PF packet filter and loading it via module didn't work. This is noted in some mailing list archive posts I read. Instead of trying to rebuild the module I built a new kernel with PF enabled.
my $.02