Anaconda does a good job of setting up ipchains for you, but there needs to be an obvious tool to manipulate the rules after installation. Savvy folk (like myself) don't mind editing /etc/sysconfig/ipchains by hand, but most people who install RedHat 7.1 will probably want a very strong firewall (who wouldn't?) and then will curse when they cannot get onto IRC or use NFS. A firewalltool akin to the printtool will be necessary so that they can untie and/or tie up their firewall after installation; without it you'll be asking for trouble. If there already is such a tool, I couldn't find it.
lokkit/gnome-lokkit. There is also firewall-config; it's more complicated.