firewall rules to be placed in administration→scripts→firewall:

iptables -I INPUT -p tcp -m tcp --dport 1194 -s scope1/32 -j ACCEPT
iptables -I INPUT -p tcp -m tcp --dport 1194 -s scope2/16 -j ACCEPT
iptables -I INPUT -p udp -m udp --dport 1194 -s scope1/32 -j ACCEPT
iptables -I INPUT -p udp -m udp --dport 1194 -s scope2/16 -j ACCEPT
iptables -A INPUT -p tcp -m tcp --dport 1194 -j REJECT
iptables -A INPUT -p udp -m udp --dport 1194 -j REJECT
iptables -I FORWARD -j ACCEPT