diff --git a/CHANGELOG b/CHANGELOG
index bca70982..fa48e0b7 100644
--- a/CHANGELOG
+++ b/CHANGELOG
@@ -17,6 +17,7 @@ ver. 0.8.2 (2007/??/??) - stable
 - Added "full line failregex" patch. Thanks to Yaroslav
   Halchenko. It will be possible to create stronger failregex
   against log injection
+- Fixed ipfw action script. Thanks to Nick Munger
 
 ver. 0.8.1 (2007/08/14) - stable
 ----------
diff --git a/config/action.d/ipfw.conf b/config/action.d/ipfw.conf
index 0d5f1bbb..5305265e 100644
--- a/config/action.d/ipfw.conf
+++ b/config/action.d/ipfw.conf
@@ -37,7 +37,7 @@ actioncheck =
 #          <time>  unix timestamp of the ban time
 # Values:  CMD
 #
-actionban = ipaction add deny tcp from <ip> to <localhost> <port>
+actionban = ipfw add deny tcp from <ip> to <localhost> <port>
 
 
 # Option:  actionunban
@@ -48,7 +48,7 @@ actionban = ipaction add deny tcp from <ip> to <localhost> <port>
 #          <time>  unix timestamp of the ban time
 # Values:  CMD
 #
-actionunban = ipaction delete `ipfw list | grep -i <ip> | awk '{print $1;}'`
+actionunban = ipfw delete `ipfw list | grep -i <ip> | awk '{print $1;}'`
 
 [Init]