diff --git a/docs/banning.md b/docs/banning.md
index eaebfd7fe7f26728b55dcc73598fdd6d981f8fd4..1a2c47ea20ef1399900436099806e76c738ad4ff 100644
--- a/docs/banning.md
+++ b/docs/banning.md
@@ -1,11 +1,19 @@
 # Banning IP Addresses for abuse
 
+For banning with an expiry `fail2ban` can be used, the expiry time depends on the configured fail2ban jail:
+
+```
+fail2ban-client set sshd banip 1.1.1.1
+```
+
+To permanently ban an IP address `firewall-cmd` can be used as shown below:
+
 ```
-firewall-cmd --add-rich-rule="rule family='ipv4' source address='1.1.1.1' reject"
+firewall-cmd --add-rich-rule="rule family='ipv4' source address='1.1.1.1' reject" --zone=public
 ```
 
 ```
-firewall-cmd --add-rich-rule="rule family='ipv6' source address='1:2:3:4:6::' reject"
+firewall-cmd --add-rich-rule="rule family='ipv6' source address='1:2:3:4:6::' reject" --zone=public
 ```
 
 Note that on Gitlab, you must block the ip address for the docker zone:
@@ -23,5 +31,5 @@ firewall-cmd --list-all
 To remove a banned IP Address:
 
 ```
-firewall-cmd --remove-rich-rule='rule family="ipv6" source address="1:2:3:4:6::" reject'
+firewall-cmd --remove-rich-rule='rule family="ipv6" source address="1:2:3:4:6::" reject' --zone=public
 ```