enable --now combines two steps: it registers the service to start automatically at boot (enable) and starts it immediately (now). Fail2ban only protects what is running, so a server that reboots without this enabled loses its ban behavior entirely. Confirm with sudo fail2ban-client status.
Looking for more? Search all 7,657 commands — works offline, in English or Spanish, and fixes typos.