Smarter SuSEFirewall proposal during installation

* Don't propose to enable the firewall if SuSEFirewall is not selected for installation (bnc#881250)
* Avoid wacky proposals when possible (bnc#886554)
Opening ports by default is not good idea from my POV.  If the user enables firewall later then I'd prefer to have the ports closed to force him enable them explicitly.