-A INPUT -p tcp -m tcp --dport 9091 -j ACCEPT
# 1195 is used for the secondary vpn server
--A OUTPUT -p udp -m udp --dport 1194:1195 -j ACCEPT
--A INPUT -p udp -m udp --sport 1194:1195 -j ACCEPT
+# 1198 is another vpn port, simpler syntax just to use range
+-A OUTPUT -p udp -m udp --dport 1194:1198 -j ACCEPT
+-A INPUT -p udp -m udp --sport 1194:1198 -j ACCEPT
-A OUTPUT -o tun0 -j ACCEPT
-A INPUT -i tun0 -j ACCEPT