SuSEfirewall2 config question