...

I set up a router with SuSEfirewall2 and allowed only certain ports for masquerading. To allow ping through the firewall I added the line 0/0,0/0,icmp in FW_MASQ_NETS. But the pings do not reach the external computers. What is missing?

Dirk maybe u need also to add a rule to let the ping request be forwareded to the outside?!

the forwarding rules are only for routing from the internet to the intranet (so the documents say), so these rules do not apply. i also set FW_ALLOW_PING_EXT="yes"; but this has only the effect that the pings do not appear in the log-files - i get no error message. but the ping does not reach the destination.