I have F7, and believe that FC6 also did this. I'd like to know why Fedora creates a user-defined chain - "RH-Firewall-1-INPUT". Is that better than putting the rules into INPUT? I'm wondering if I'm customizing my iptables properly (putting new rules into the RH-Firewall-1-INPUT chain.