Description of problem: The firewall command in the kickstart config should have an option that trusts specific IPs or hosts. Possibly the --trust option can be made to tell the difference between interfaces and IPs. Think zephyr servers.
anaconda's interface for this stuff is going to be getting simpler, not more complicated. Having lokkit expose something like this that could be used in a scripted fashion wouldn't be terrible, though (and at that point, I might consider passing arbitrary options to the firewall command on to lokkit)
Indeed! Along the lines of bug 128046, this option should also be available in the GUI.
Moving to Fedora since we're not going to be able to get a change like this into RHEL3.
There will be a new firewall config tool for fedora soon. But the first version will not have this feature, but it is on the todo list.
Assigning to system-config-firewall.
Closing because there will not be big changes to system-config-firewall anymore.