(In reply to Bat Pul from comment #0) > Can this be fixed in OpenSUSE? According to the bugs you referred to, it has to be fixed on the client side, i.e. in Debian. > How can I in the meantime get the iptables hack permanently enabled? One way would be to add it to an appropriate place in this file: /etc/sysconfig/scripts/SuSEfirewall2-custom But maybe there is a better place somewhere in the network scripts of libvirt.