[CentOS] cr repo and firewalling