susefirewall2 trusted external ip

I have a mysql server running on a firewalled suse 10.x box.

Im aware of the fact that the 3306 port is open to all address, where as I
only need it to be fixed to the developers static ip address remotely.

I can see how to put trusted internal addresses into the firewall2 config
but where do I put an external address?

Thanks

Tim


.