SuSE Firewall, specific deny