diff --git a/CHANGELOG b/CHANGELOG
index 3c37789d..42c371a7 100644
--- a/CHANGELOG
+++ b/CHANGELOG
@@ -23,6 +23,8 @@ ver. 0.6.? (200?/??/??) - ???
   Thanks to Mark Edgington
 - Added patch #1382936 (Default formatted syslog logging).
   Thanks to Patrick Börjesson
+- Removed 192.168.0.0/16 from ignoreip. Attacks could also
+  come from the local network.
 
 ver. 0.6.0 (2005/11/20) - stable
 ----------
diff --git a/config/fail2ban.conf.default b/config/fail2ban.conf.default
index 96337fcd..ad28e1f9 100644
--- a/config/fail2ban.conf.default
+++ b/config/fail2ban.conf.default
@@ -58,9 +58,9 @@ findtime = 600
 # Notes.:  space separated list of IP's to be ignored by fail2ban.
 #          You can use CIDR mask in order to specify a range.
 #          Example:  ignoreip = 192.168.0.1/24 123.45.235.65
-# Values:  IP  Default:  192.168.0.0/16
+# Values:  IP  Default:  
 #
-ignoreip = 192.168.0.0/16
+ignoreip = 
 
 # Option:  cmdstart
 # Notes.:  command executed once at the start of Fail2Ban