diff --git a/ChangeLog b/ChangeLog
index f01ed930..ca2601bc 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -26,6 +26,9 @@ ver. 0.9.2 (2014/XX/XXX) - wanna-be-released
    * filter.d/postfix-sasl.conf - failregex is now case insensitive
    * filters.d/postfix.conf - add 'Client host rejected error message' failregex
    * fail2ban/__init__.py - add strptime thread safety hack-around
+   * recidive uses iptables-allports banaction by default now.
+     Avoids problems with iptables versions not understanding 'all' for
+     protocols and ports
 
 - New Features:
    - New filter:
diff --git a/config/jail.conf b/config/jail.conf
index 70104878..334e3298 100644
--- a/config/jail.conf
+++ b/config/jail.conf
@@ -663,8 +663,7 @@ maxretry = 5
 [recidive]
 
 logpath  = /var/log/fail2ban.log
-port     = all
-protocol = all
+banaction = iptables-allports
 bantime  = 604800  ; 1 week
 findtime = 86400   ; 1 day
 maxretry = 5