diff --git a/config/fail2ban.conf.default b/config/fail2ban.conf.default
index d31c76c4..c1bb16f7 100644
--- a/config/fail2ban.conf.default
+++ b/config/fail2ban.conf.default
@@ -4,6 +4,10 @@
 
 [DEFAULT]
 
+# firewall: select the firewall system to use. Actually,
+# the available options are: iptables, ipfwadm, ipfw
+firewall = iptables
+
 # background: true to start fail2ban as a daemon. Output
 # is redirect to logfile.
 background = false
@@ -31,6 +35,10 @@ bantime = 600
 # ignoreip = 192.168.0.1 123.45.235.65
 ignoreip = 
 
+# interface: the interface name on which the IP will be
+# banned.
+interface = eth0
+
 # polltime: the number of seconds that fail2ban sleeps
 # between two iteration (check for IP to unban - parse
 # log file). 1 is a good value.