(With system-config-firewall-tui-1.0.8-1.fc8)

Running e.g.:

  $> lokkit -f --quiet --enabled --nostart --port=22:tcp

does not cause /etc/sysconfig/iptables and /etc/sysconfig/ip6tables to be
written ... only /etc/sysconfig/system-config-firewall is written.

I've noticed this under two circumstances:

  1) Installed an F8 system using anaconda over a serial console and vnc.
     When the tui firstboot ran, I just closed it. Later on I see iptables
     is running, but no rules and default policy of ACCEPT.

  2) Installed an F8 livecd and ran lokkit in %post to add some ports. When
     I ran the image there was no firewall.

Seems to me that the behavioral change of lokkit --nostart is the issue.