# how to update SuSEfirewall2 without restarting docker

**URL:** <https://forums.suse.com/t/how-to-update-susefirewall2-without-restarting-docker/35618>\
**Category:** General Discussion\
**Created:** [June 8, 2021, 12:11am UTC](https://forums.suse.com/t/how-to-update-susefirewall2-without-restarting-docker/35618 "2021-06-08T00:11:15Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![jayvi](https://avatars.discourse-cdn.com/v4/letter/j/34f0e0/32.png) [@jayvi](https://forums.suse.com/u/jayvi)\
**Post date:** [June 8, 2021, 12:11am UTC](https://forums.suse.com/t/how-to-update-susefirewall2-without-restarting-docker/35618/1 "2021-06-08T00:11:15Z")

</div>

We occasionally need to add ports for `FW_SERVICES_EXT_TCP` in `/etc/sysconfig/SuSEfirewall2`. After restarting running firewall:  
`systemctl restart SuSEfirewall2.service`  
But docker dynamically uses the firewall for routing, so the firewall restart breaks our container routing. The only solution that I have found is to restart docker. This is expensive to do so I am looking for a better solution that does not impact our running containers.