Comment # 1 on bug 1227218 from Ákos Szőts

Also, you need both to be enabled:


systemctl enable --now fail2ban.service
systemctl enable --now firewalld.service
systemctl restart firewalld.service