>> /etc/sysconfig/modules
>
> I have no idea why all these modules need to be loaded manually. The
> respective tools like ip6tables, strongswan and so on will do that when
> needed.

Me neither. The documentation stems from a forum thread where this was  
specified.


>> /etc/sysctl.conf
>
> It is probably better to create /etc/sysctl.d and then have a file in
> that directory that overwrites the default settings in /etc/sysctl.conf

Thx, will change this and the other points you mentioned.


Lars