Anaconda does a good job of setting up ipchains for you, but there needs to
be an obvious tool to manipulate the rules after installation. Savvy folk
(like myself) don't mind editing /etc/sysconfig/ipchains by hand, but most
people who install RedHat 7.1 will probably want a very strong firewall
(who wouldn't?) and then will curse when they cannot get onto IRC or use
NFS. A firewalltool akin to the printtool will be necessary so that they
can untie and/or tie up their firewall after installation; without it
you'll be asking for trouble.
If there already is such a tool, I couldn't find it.
lokkit/gnome-lokkit. There is also firewall-config; it's more complicated.