SuSEfirewall2 - question