I just updated iptables. Lucky me, I noticed a warning that it renamed /etc/sysconfig/iptables.
It was *my* iptables. rpm must *not* remove files if they were modified by user. Just like it should not create .rpmnew if files were *not* modified by user. -andrej
