Can confirm on Tumbleweed that setting FW_LO_NOTRACK="no" in /etc/sysconfig/SuSEfirewall2 makes sshuttle work when SuSEfirewall2 is running. I agree with Carl Thompson, that FW_LO_NOTRACK shound not be enabled by default.