diff --git a/iptables/jail.local b/iptables/jail.local
index 7ac601d..b75366e 100644
--- a/iptables/jail.local
+++ b/iptables/jail.local
@@ -102,6 +102,14 @@ filter   = sshd
 logpath  = /var/log/auth.log
 maxretry = 6
 
+[nginx-limits]
+
+enabled  = true
+port     = http,https
+filter   = nginx-limits
+logpath  = /nginx/logs/error.log
+maxretry = 6
+
 [dropbear]
 
 enabled  = false