Starting with nf_conntrack which is requirement for just about everything having to do with routing and ending with iptable_nat (the dependency chain has a few other modules in between as well)