rc: traffic monitoring for OpenVPN must be inserted on top of ACCEPT rule