diff --git a/pulseaudio-server.fw b/pulseaudio-server.fw
new file mode 100644
index 0000000..6295b45
--- /dev/null
+++ b/pulseaudio-server.fw
@@ -0,0 +1,3 @@
+## Name: PulseAudio server (TCP)
+## Description: Ports for PulseAudio network access (for module-native-protocol-tcp)
+TCP="4713"
diff --git a/pulseaudio.changes b/pulseaudio.changes
index 4d4ed13..d07d249 100644
--- a/pulseaudio.changes
+++ b/pulseaudio.changes
@@ -1,3 +1,8 @@
+-------------------------------------------------------------------
+Mon Jun 24 15:10:41 UTC 2013 - oholecek@suse.com
+
+- add SUSEfirewall service definition (bnc#607614)
+
 -------------------------------------------------------------------
 Thu Jun 13 13:45:08 UTC 2013 - oholecek@suse.com
 
diff --git a/pulseaudio.spec b/pulseaudio.spec
index 9898144..65bcc6d 100644
--- a/pulseaudio.spec
+++ b/pulseaudio.spec
@@ -22,6 +22,7 @@ Release:        0
 %define drvver  4.0
 %define soname  0
 %define _udevrulesdir %(pkg-config --variable=udevdir udev)/rules.d
+%define _fwdefdir /etc/sysconfig/SuSEfirewall2.d/services
 Summary:        A Networked Sound Server
 License:        GPL-2.0+ and LGPL-2.1+
 Group:          System/Sound Daemons
@@ -30,6 +31,7 @@ Source:         http://www.freedesktop.org/software/pulseaudio/releases/%{name}-
 Source1:        default.pa-for-gdm
 Source2:        setup-pulseaudio
 Source3:        sysconfig.sound-pulseaudio
+Source4:        pulseaudio-server.fw
 Source99:       baselibs.conf
 Patch0:         disabled-start.diff
 Patch1:         suppress-socket-error-msg.diff
@@ -308,6 +310,11 @@ touch %{buildroot}%{_sysconfdir}/profile.d/pulseaudio.csh
 mkdir -p %{buildroot}%{_localstatedir}/lib/gdm/.pulse
 cp $RPM_SOURCE_DIR/default.pa-for-gdm %{buildroot}%{_localstatedir}/lib/gdm/.pulse/default.pa
 ln -s esdcompat %{buildroot}%{_bindir}/esd
+# install firewall rule on SUSE
+%if %{defined suse_version}
+mkdir -p %{buildroot}/%{_fwdefdir}
+install -m 0644 %{S:4} %{buildroot}/%{_fwdefdir}/pulseaudio-server
+%endif
 %fdupes -s doxygen/html
 
 %clean
@@ -439,6 +446,9 @@ setup-pulseaudio --auto > /dev/null
 %config(noreplace) %{_sysconfdir}/pulse/system.pa
 %config(noreplace) %{_sysconfdir}/dbus-1/system.d/pulseaudio-system.conf
 %config(noreplace) %{_sysconfdir}/bash_completion.d/pulseaudio-bash-completion.sh
+%if %{defined suse_version}
+%config(noreplace) %{_fwdefdir}/pulseaudio-server
+%endif
 # created by setup-pulseaudio script
 %ghost %{_sysconfdir}/profile.d/pulseaudio.sh
 %ghost %{_sysconfdir}/profile.d/pulseaudio.csh