RE: allow EXCEPT (SuSEfirewall2)