On new EL6 box, by default access auth policy is required to access firewall setups from remote(even ssh from root@localhost).
solution, 1. access root from local by sudo/su.
solution,2. add remote access policy file.
Sample:system-config-firewall from remote machine