diff --git a/ChangeLog b/ChangeLog
index 6f98cc11..90a57f75 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -10,7 +10,10 @@ Fail2Ban (version 0.8.9.dev)                                          2013/??/??
 ver. 0.8.10 (2013/XX/XXX) - NOT-YET-RELEASED
 -----------
 
-- Fixes
+- Fixes:
+  Yaroslav Halchenko
+   * action.d/{route,shorewall}.conf - blocktype must be defined
+     within [Init].  Closes gh-232
 - New Features
 - Enhancements
 
diff --git a/config/action.d/route.conf b/config/action.d/route.conf
index bb4ec8e1..123245e5 100644
--- a/config/action.d/route.conf
+++ b/config/action.d/route.conf
@@ -18,6 +18,8 @@
 actionban   = ip route add <blocktype> <ip>
 actionunban = ip route del <blocktype> <ip>
 
+[Init]
+
 # Option:  blocktype
 # Note:    Type can be blackhole, unreachable and prohibit. Unreachable and prohibit correspond to the ICMP reject messages.
 # Values:  STRING
diff --git a/config/action.d/shorewall.conf b/config/action.d/shorewall.conf
index b165c701..81ac0518 100644
--- a/config/action.d/shorewall.conf
+++ b/config/action.d/shorewall.conf
@@ -48,6 +48,8 @@ actionban = shorewall <blocktype> <ip>
 #
 actionunban = shorewall allow <ip>
 
+[Init]
+
 # Option:  blocktype
 # Note:    This is what the action does with rules.
 #          See man page of shorewall for options that include drop, logdrop, reject, or logreject