I wish iptables had an option to use full-cone NAT (endpoint independent mapping + filtering per rfc5128) instead of always doing full cone (endpoint-dependent)

I wish iptables had an option to use full-cone NAT (endpoint independent mapping + filtering per rfc5128) instead of always doing full cone (endpoint-dependent). It would dramatically cut down on the number of table entries needed, possibly down to 1 if you use source port binding.