SuSE, ipfwadm, and getting the line up only when traffic asks

Edge policy on modest hardware before dedicated appliances