According to Alan Cox 'gnome-lokkit' package should have its own
files/links in /etc/init.d and /etc/rc?.d directories. An rpm archive
for it from RC1 does not have any and they do not seem to be included
in anything else either.
Regardless of their status gnome-lokkit is using /etc/sysconfig/firewall
configuration file while ipchains look for /etc/sysconfig/ipchains.
It is obvious that these two set and reset ipchains rules totally
independently creating a marvelous opportunity for security screwups.
*** This bug has been marked as a duplicate of 16479 ***