They make an ass out of you and umption. It's true.
I made an assumption that the "firewall" was configured to actually be a "firewall" (as in "only the necessary services permitted inbound, to the necessary destinations, from the necessary sources.")
I was wrong. Spent the better part of a morning sorting out the attempts that had been made to hack the hell out of a fresh virgin Red Hat install.