OPENVPN_CIPHER   = 'DES-CBC|IDEA-CBC|RC2-CBC|DES-EDE-CBC|DES-EDE3-CBC|DESX-CBC|BF-CBC|RC2-40-CBC|CAST5-CBC|RC5-CBC|RC2-64-CBC|AES-128-CBC|AES-192-CBC|AES-256-CBC|none'
                 : 'The selected cipher is not supported'
OPENVPN_DIGEST   = 'MD2|MD5|RSA-MD2|RSA-MD5|SHA|RSA-SHA|SHA1|RSA-SHA1|DSA-SHA|DSA-SHA1-old|MDC2|RSA-MDC2|DSA-SHA1|RSA-SHA1-2|DSA|RIPEMD160|RSA-RIPEMD160|MD4|RSA-MD4|none'
                 : 'The selected digest is not supported'
OPENVPN_SECRET   = 'yes|no|webgui'
                 : 'yes creates a new secret at boot time, no disables creating a new key and webgui allows the webgui to create a key'
OPENVPN_VERSION  = '2.1|2.0'
                 : 'choose between OpenVPN version 2.1.x or 2.0.x'
+FW_IF(OPT_OPENVPN) = 'VPNDEV'
                 : 'no errormessage yet'
+FW_IF(OPENVPN_EXPERT) = 'tun[+]|tun[0-9]+'
                 : ''
FW_OVPN_CHAIN    = 'ovpn-chain'
                 : 'no errormessage yet'
+FW_INPUT_RULE= 'RE:FW_OVPN_CHAIN'
 : 'no errormessage yet'
+FW_FORWARD_RULE = 'RE:FW_OVPN_CHAIN'
                 : 'no errormessage yet'
+FW_NET          = 'REMOTE-NET'
                 : 'no errormessage yet'
+FW_NET_IP       = 'LOCAL-VPN-IP|REMOTE-VPN-IP'
                 : 'no errormessage yet'
OPENVPN_FW_NAT_POST_RULE= '[[:space:]]*((RE:FW_NAT_POST_MATCH)+)?(RE:FW_IP){2}(RE:FW_NAT_POST_ACTION)'
                : 'OpenVPN POSTROUTING rules need source and destination ip addresses or networks since fli4l version 3.5.0'
OPENVPN_NAME     = '[-0-9A-Za-z]{2,16}'
                 : 'OPENVPN_x_NAME name must consist of 2 to 16 characters (only alphanumerical characters and hyphens are acceptable)'
OPENVPN_DMZ_TYPE = 'green|none' : 'please use either green or none'