Comment # 4 on bug 1036590 from Matthias Gerstner

(In reply to okurz@suse.com from comment #3)

> maybe that part wasn't clear from the description. The scenario is an
> upgrade scenario from openSUSE 12.2(!) to the current openSUSE Tumbleweed
> snapshot.

I see, thanks for the clarification.

I can reproduce this based on the provided 12.2 image. After the upgrade
procedure the firewall is disabled. It can be enabled manually either directly
via systemctl or via yast without problems.

I've struggled with yast, yast-network, yast-firewall and yast-installation
but failed to clearly identify the exact code/mechanism that's supposed to
transfer the previous firewall enable/disable state to the new installation.

I suspect that some expectation of this mechanism isn't met any more. Maybe
some yast developer can shed some light on this?