As far as I can remember it runs on stock kernel but you need to load the stock iptables kernel modules. But they have a very limited functionality.
So for full support you need to use kernel plus.
Thank you so much for the reply and the useful info! Do you remember if stock iptables kernel module can do masquerading for setting up up tethering over usb ?
meeTrainer -- syncgcontacts -- orientationLock -- meeSwitchernet