/etc/sysconfig/modules
I have no idea why all these modules need to be loaded manually. The respective tools like ip6tables, strongswan and so on will do that when needed.
Me neither. The documentation stems from a forum thread where this was specified.
/etc/sysctl.conf
It is probably better to create /etc/sysctl.d and then have a file in that directory that overwrites the default settings in /etc/sysctl.conf
Thx, will change this and the other points you mentioned.
Lars