/etc/hosts.allow is this a bug or I am doing something wrong?

[jnet]

In this file /etc/hosts.allow I have

sshd : 1.23.45.567 : allow
sshd : ALL : deny

Is the above wrong?  It is not working for me.
I still can ssh to server from any ip
I want to restrcit ssh to only 1.23.45.567 ip

[jnet]

OK I think I discovered what was wrong, I removed port 22 from firewall
made sure I whitelist my static ip in firewall and have it in hosts.allow