Hello Arne,
by accident, I just came across commit 5b4fc4c8493747af7a6772e1085ef0d45c9ab6af and this "diff" output: https://git.ipfire.org/?p=ipfire-2.x.git;a=blobdiff;f=config/rootfiles/oldco...
Frankly, I did not understand why you changed "/etc/init.d/ipsec stop" to "/etc/init.d/ipsec start": IPsec is started later in this script, if it is enabled, and the comment above reads "stop services".
No offense intended, but is this change intentional? :-)
Thanks, and best regards, Peter Müller