RE: [suse-security] YAST and updates

So how do I set up my firewall so to cater for this?.. is it not a nice security hole to allow all those ports above 1023 open?.

It uses FTP. Set up an FTP proxy (preferrable) or a stateful helper module (simpler) to handle it without opening up the entire 'unprivileged' port range inbound. Cheers Tobias