allow EXCEPT (SuSEfirewall2)