diff --git a/ipasserelle-base.spec b/ipasserelle-base.spec
index 65bb91b..ec2451c 100644
--- a/ipasserelle-base.spec
+++ b/ipasserelle-base.spec
@@ -1,4 +1,4 @@
-%define version 0.2.27
+%define version 0.2.28
 %define release 1
 %define name ipasserelle-base
 
@@ -20,12 +20,10 @@ Requires: e-smith-ldap
 Requires: smeserver-remoteuseraccess
 Requires: smeserver-zabbix-agent
 Requires: smeserver-zabbix-proxy
-Requires: smeserver-denyhosts
 Requires: logwatch
 Requires: smeserver-shared-folders
 Requires: smeserver-qos
 Requires: smeserver-fetchmail
-Requires: smeserver-mailstats
 Requires: smeserver-webapps-common
 Requires: bash-completion
 Requires: ipasserelle-repo
@@ -39,7 +37,9 @@ Requires: perl(Proc::ProcessTable)
 Requires: perl(Proc::ProcessTable::Process)
 Requires: pbzip2
 Requires: yum-downloadonly
-
+Requires: smeserver-fail2ban
+Obsoletes: smeserver-denyhosts
+Obsoletes: smeserver-mailstats
 
 %description
 Meta package to configure an iPasserelle Server
@@ -47,6 +47,10 @@ Based on SMEServer, iPasserelle is a specially configured
 SME Server, with some additionnal modules
 
 %changelog
+* Wed Jun 5 2013 Daniel Berteaud <daniel@firewall-services.com> 0.2.28-1
+- Replace denyhosts with fail2ban
+- Obsoletes smeserver-mailstats
+
 * Fri Apr 19 2013 Daniel Berteaud <daniel@firewall-services.com> 0.2.27-1
 - add innodb_file_per_table directive to my.cnf