Mine

CONFIG_IP_NF_IPTABLES=m
CONFIG_IP_NF_MATCH_LIMIT=Y
CONFIG_IP_NF_MATCH_MAC=m
CONFIG_IP_NF_MATCH_MARK=m
CONFIG_IP_NF_MATCH_MULTIPORT=m
CONFIG_IP_NF_MATCH_TOS=m
CONFIG_IP_NF_MATCH_TCPMSS=m
CONFIG_IP_NF_MATCH_STATE=m
CONFIG_IP_NF_MATCH_UNCLEAN=m
CONFIG_IP_NF_MATCH_OWNER=m
CONFIG_IP_NF_FILTER=Y
CONFIG_IP_NF_TARGET_REJECT=m
CONFIG_IP_NF_TARGET_LOG=Y
CONFIG_IP_NF_TARGET_TCPMSS=m
CONFIG_CONNTRACK=Y
CONFIG_IP_NF_IPTABLES=Y
CONFIG_IP_NF_NAT=Y
CONFIG_IP_NF_MATCH_STATE=Y
CONFIG_IP_NF_TARGET_MASQUERADE=Y