The firewall-config tool generates /etc/sysconfig/firewall. To let the config file take effect you have to type as root:
$ /etc/rc.d/init.d/firewall restart
This will soon be integrated in the firewall-config gui.