By preloading some modules we fix two things. 1. Some sysctl settings like ip_conntrack_max are not set during boot because the module is not loaded at that time. 2. Passive ftp does not work through iptables without these modules.

Signed-off-by: Daan Hoogland <daan@onecht.net>
(cherry picked from commit bfccf439cfe120f5d1380a642e8b798335e1cf2e)
(cherry picked from commit af4e868547c215d511fbdd77f70e5e7b0303d3e5)
blacklist pcspkr as cosmetic improvement. aesni_intel blacklisting was not working because the include only works if the file ends with .conf.

Signed-off-by: Daan Hoogland <daan@onecht.net>
(cherry picked from commit 11f532bbecca08b41dd15d1abdf04957c84eebda)
(cherry picked from commit f94ff4ad041c517b048ce8fc58ef3996b98aa685)
rats
(cherry picked from commit b85dd956f8187ea2810f4fd74728c0a430ce6ef4)

(cherry picked from commit 5eb026534929774d468976870979440b88f7a5b8)
If for some reason dnsmasq.log does not exist anymore logrotate will create it with nobody as owner. This will prevent dnsmasq deamon from logging to that file.

Signed-off-by: Daan Hoogland <daan@onecht.net>
(cherry picked from commit c54ce3cafbc51febe71fb2a997dbfc8ac9167fb0)
(cherry picked from commit 94bb5c29b293b5eebc21c67124d429a59736f11a)
xenstore-utils on debian wheezy does not have /usr/sbin/xenstore so these commands file. It does have xenstore-write and xenstore-rm so by adding a - this is fixed easily.

Signed-off-by: Daan Hoogland <daan@onecht.net>
(cherry picked from commit 2e83baaca2c998cfdda281301dffb09a1a20aa5c)
(cherry picked from commit ed330d4dcdfbab70230e87654b5f7fb43db6c3ac)