Description of problem: /sbin/ifup has code fragments like that: if iptables -L -n 2>/dev/null | LC_ALL=C grep -q RH-Lokkit-0-50-INPUT ; then ..... and more of other "RH-Lokkit" specific pieces. The catch is that the current /etc/sysconfig/iptables defines "RH-Firewall-1-INPUT" chain and there is no "RH-Lokkit" around anymore. Leftovers from old times? DNS still happens to work even if there are no port 53 specific holes punched through. Version-Release number of selected component (if applicable): initscripts-7.59-1
It's for old compatiblity; it's not needed for the current firewall.