diff --git a/openvpn-install.sh b/openvpn-install.sh
index 10f69c4..49f7617 100644
--- a/openvpn-install.sh
+++ b/openvpn-install.sh
@@ -146,6 +146,11 @@ if [[ -e /etc/openvpn/server.conf ]]; then
 					sed -i "/iptables -I FORWARD -m state --state RELATED,ESTABLISHED -j ACCEPT/d" $RCLOCAL
 				fi
 				sed -i '/iptables -t nat -A POSTROUTING -s 10.8.0.0\/24 -j SNAT --to /d' $RCLOCAL
+				if sestatus | grep "Current mode" | grep -qs "enforcing"; then
+					if [[ "$PORT" != '1194' ]]; then
+						semanage port -d -t openvpn_port_t -p udp $PORT
+					fi
+				fi
 				if [[ "$OS" = 'debian' ]]; then
 					apt-get remove --purge -y openvpn openvpn-blacklist
 				else
@@ -309,7 +314,7 @@ crl-verify crl.pem" >> /etc/openvpn/server.conf
 		sed -i "1 a\iptables -I FORWARD -m state --state RELATED,ESTABLISHED -j ACCEPT" $RCLOCAL
 	fi
 	# If SELinux is enabled and a custom port was selected, we need this
-	if getenforce | grep -qs "Enforcing"; then
+	if sestatus | grep "Current mode" | grep -qs "enforcing"; then
 		if [[ "$PORT" != '1194' ]]; then
 			# semanage isn't available in CentOS 6 by default
 			if ! which semanage > /dev/null 2>&1; then