It's not a YaST Firewall, we are using firewalld UI, but it solves the problem ... using upstream solution.