Why is the deny rule not created in the new version of fail2ban?

Question

ubuntu

Who will tell you about fail2ban. In the new version, it doesn't set the iptables deny rule.
But when you give the fail2ban-client status sshd command, it shows blocked ip

Answer 1

Because it uses iptables + ipset.

Answer 2

try asking fail2ban it's like fail2ban -help or --help