[CentOS] 2 questions on CentOS firewall