[jshantz]

Originally Posted by framp

IFrankly I don't understand why you allow a browser on a FW - but anyhow:

Because it's not a real firewall system -- this is a web filtering solution for end users who may not have much technical knowledge whatsoever but want to setup filtering easily for their children/students. Those kinds of users don't generally have multiple systems which would allow a dedicated firewall setup. It needs to be an all-in-one solution.

Then you should change -A (append) into -I (insert) to make sure your iptable rules have higher priority than the SuSE rules.

I don't think it will make a difference -- the custom rules that I have are in the NAT table. All other rules (added by the SUSE firewall) are in the filter table.

Thanks for your response.