Index: configs/fw/fw1.ferm
===================================================================
--- configs/fw/fw1.ferm (revision 1035)
+++ configs/fw/fw1.ferm (working copy)
@@ -171,6 +171,7 @@
 
     chain IN_EXT1_TO_ME {
         proto tcp sport 513: dport 22 ACCEPT;
+        proto udp sport (1024:) dport 1194 ACCEPT;
         proto icmp icmp-type echo-request ACCEPT;
     }
 
@@ -520,6 +521,9 @@
     }
 
     chain SHAPING {
+        proto udp {
+            dport 1194 daddr $GATEWAY MARK set-mark 10;
+        }
         proto tcp {
             sport 22 saddr ! $DEV MARK set-mark 10;
             dport 22 daddr ! $DEV MARK set-mark 10;