diff --git a/iptables/jail.local b/iptables/jail.local
index b75366e..9f65277 100644
--- a/iptables/jail.local
+++ b/iptables/jail.local
@@ -110,6 +110,13 @@ filter   = nginx-limits
 logpath  = /nginx/logs/error.log
 maxretry = 6
 
+[nginx-ban]
+enabled  = true
+port     = http,https
+filter   = nginx-ban
+logpath  = /hostdata/*/logs/access.log
+maxretry = 1
+
 [dropbear]
 
 enabled  = false