$> lokkit -f --quiet --enabled --nostart --port=22:tcp
does not cause /etc/sysconfig/iptables and /etc/sysconfig/ip6tables to be
written ... only /etc/sysconfig/system-config-firewall is written.
I've noticed this under two circumstances:
1) Installed an F8 system using anaconda over a serial console and vnc.
When the tui firstboot ran, I just closed it. Later on I see iptables
is running, but no rules and default policy of ACCEPT.
2) Installed an F8 livecd and ran lokkit in %post to add some ports. When
I ran the image there was no firewall.
Seems to me that the behavioral change of lokkit --nostart is the issue.
*** Bug 352141 has been marked as a duplicate of this bug. ***
This was built as 1.0.8-3.fc8.
Confirmed with live image of today's rawhide.