$ cat -n /etc/sysconfig/network-scripts/ifup-post | grep Lokkit 77 iptables -L -n 2>/dev/null | grep -q RH-Lokkit-0-50-INPUT ; then 81 if ! iptables -L RH-Lokkit-0-50-INPUT -n | grep -q "$nameserver.* --sport 53 " ; then 82 iptables -I RH-Lokkit-0-50-INPUT -m udp -s $nameserver/32 --sport 53 -d 0/0 --dport 1025:65535 -p udp -j ACCEPT
Xref: bug 108096 comment #2
It's there for compatibility with old configrations. Modifying the firewall is not needed at all for the new chain.