> When we did some changes to our iptables, we had to recompile the kernel, because every match or target was requiring a kernel module.

What?