adapted to susefirewall changes as well