diff --git a/krb5-doc.spec b/krb5-doc.spec
index a937d61..3aaddec 100644
--- a/krb5-doc.spec
+++ b/krb5-doc.spec
@@ -13,7 +13,7 @@
 Name:           krb5-doc
 BuildRequires:  ghostscript-library latex2html te_ams
 Version:        1.6
-Release:        10
+Release:        11
 %define srcRoot krb5-1.6
 Summary:        MIT Kerberos5 Implementation--Documentation
 License:        X11/MIT
diff --git a/krb5-plugins.spec b/krb5-plugins.spec
index f8e41ee..1f3374c 100644
--- a/krb5-plugins.spec
+++ b/krb5-plugins.spec
@@ -13,7 +13,7 @@
 
 Name:           krb5-plugins
 Version:        1.6
-Release:        7
+Release:        8
 BuildRequires:  krb5-devel openldap2-devel
 %define srcRoot krb5-1.6 
 %define vendorFiles %{_builddir}/%{srcRoot}/vendor-files/
diff --git a/krb5.changes b/krb5.changes
index 09bdcbb..0506b04 100644
--- a/krb5.changes
+++ b/krb5.changes
@@ -1,3 +1,8 @@
+-------------------------------------------------------------------
+Thu Feb 22 11:13:48 CET 2007 - mc@suse.de
+
+- add firewall definition to krb5-server, FATE #300687
+
 -------------------------------------------------------------------
 Mon Feb 19 13:59:43 CET 2007 - mc@suse.de
 
diff --git a/krb5.spec b/krb5.spec
index e96d7aa..14f0061 100644
--- a/krb5.spec
+++ b/krb5.spec
@@ -12,7 +12,7 @@
 
 Name:           krb5
 Version:        1.6
-Release:        9
+Release:        10
 BuildRequires:  libcom_err
 %if %{suse_version} > 1010
 BuildRequires:  keyutils keyutils-devel
@@ -236,12 +236,15 @@ mkdir -p %{buildroot}%{_sysconfdir} %{buildroot}%{_localstatedir}/lib/kerberos/k
 mkdir -p %{buildroot}%{_sysconfdir}
 mkdir -p %{buildroot}/etc/profile.d/
 mkdir -p %{buildroot}/var/log/krb5
+mkdir -p %{buildroot}/usr/share/SuSEfirewall2/services/
 install -m 644 %{vendorFiles}/krb5.conf %{buildroot}%{_sysconfdir}
 install -m 600 %{vendorFiles}/kdc.conf %{buildroot}%{_localstatedir}/lib/kerberos/krb5kdc/
 install -m 600 %{vendorFiles}/kadm5.acl %{buildroot}%{_localstatedir}/lib/kerberos/krb5kdc/
 install -m 600 %{vendorFiles}/kadm5.dict %{buildroot}%{_localstatedir}/lib/kerberos/krb5kdc/
 install -m 644 %{vendorFiles}/krb5.csh.profile %{buildroot}/etc/profile.d/krb5.csh
 install -m 644 %{vendorFiles}/krb5.sh.profile %{buildroot}/etc/profile.d/krb5.sh
+install -m 644 %{vendorFiles}/SuSEFirewall.kdc %{buildroot}/usr/share/SuSEfirewall2/services/kdc
+install -m 644 %{vendorFiles}/SuSEFirewall.kadmind %{buildroot}/usr/share/SuSEfirewall2/services/kadmind
 for n in ftpd.8 telnetd.8; do
 	mv %{buildroot}%{_mandir}/man8/${n} %{buildroot}%{_mandir}/man8/k${n}
 done
@@ -390,6 +393,7 @@ rm -rf %{buildroot}
 %{_mandir}/man8/kdb5_util.8*
 %{_mandir}/man8/krb5kdc.8*
 %{_mandir}/man8/krb524d.8*
+/usr/share/SuSEfirewall2/services/k*
 
 %files client
 %defattr(-,root,root)
@@ -490,6 +494,8 @@ rm -rf %{buildroot}
 %{_mandir}/man1/krb5-config.1*
 
 %changelog
+* Thu Feb 22 2007 - mc@suse.de
+- add firewall definition to krb5-server, FATE #300687
 * Mon Feb 19 2007 - mc@suse.de
 - update krb5-1.6-post.dif
 - move some applications into the right package
diff --git a/vendor-files.tar.bz2 b/vendor-files.tar.bz2
index 6cac8c7..8cecdde 100644
--- a/vendor-files.tar.bz2
+++ b/vendor-files.tar.bz2
@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:e8ce2440626a516d24a0baf133f3b5e461b384153dc78bfb59705d7001a8ff2e
-size 185933
+oid sha256:d7d974b9c8f4dfedb6f663f4254d9a40557a3ce7fff6b4fb66b1a7bfffa89a58
+size 186375