As far as I can remember it runs on stock kernel but you need to load the stock iptables kernel modules. But they have a very limited functionality. So for full support you need to use kernel plus.