Well, SuSEfirewall2 isn't used in Leap 15.0 and the new firewall opens the ssh port as needed. I suppose this can be closed.