diff --git a/states/firewalls/scabbers.sls b/states/firewalls/scabbers.sls
new file mode 100644
index 0000000..40ad050
--- /dev/null
+++ b/states/firewalls/scabbers.sls
@@ -0,0 +1,10 @@
+scabbers_public:
+  firewalld.present:
+    - name: public
+    - default: False
+    - ports:
+      - 22/tcp
+      - 80/tcp
+      - 443/tcp
+    - require:
+      - firewalld
diff --git a/states/top.sls b/states/top.sls
index 1544f48..797148a 100644
--- a/states/top.sls
+++ b/states/top.sls
@@ -11,6 +11,8 @@ base:
     - debian
     - certificates
     - apache
+    - fail2ban
+    - firewalls/scabbers
     - jenkins
     - jenkins/worker
     - mercurial