im currenty testing a custom embedded system with linux 4.1.15 kernel, Netfilter module are build it into kernel (not LKM). Inside netFilter Configuration enbabled: ipv4 nat