problem with compiling kernel with new modules is that rootfs would need updating also.
I have been trying to recompile kernel to support full NAT with IP tables, uploading all new modules etc to phone, so far with little success.
Either the phone MALF and wont boot, or, when replacing all modules to match new kernel, the iptables and connected modules is still reporting not matching symbols in modules.
I would be happy to test kernel and modules compiled if needed.
NAT is needed to fully complete my pentest suite, possibly also to complete TOR.