I just checked out a friends device (got it at the Meego network meeting yesterday), there is the joikuspot_bouncer kernel module, netfilter doesn't seem to be in the default kernel (again, why oh why... doing the netfilter stuff in kernel is so much more efficient than doing it "Joiku style" that it's not even funny).

But I guess titan will be building a power-users kernel for Harmattan as well (and meanwhile I can build my -hotspot kernel like I did in the past with N900).

Still just speculation though, I haven't actually tested flashing a kernel on my friends device... (need to wait till I get my own).