[Dovecot] tcpwrappers

[lejeczek]

hi everybody

having I believe sort of plain-vanilla config with section
in 10-tcpwrapper.conf
as per docs

login_access_sockets = tcpwrap

service tcpwrap {
   unix_listener login/tcpwrap {
     group = $default_login_user
     mode = 0600
     user = $default_login_user
   }
}

/etc/hosts.deny contains:
ALL: given_host

and yet dovecot logins IMAP client in
whereas other tcpwrapper aware services act as expected

what am I missing?

regards