using susefirewall2 for NAT