I have tested it with tcpd wrapper and it worked on Linux.
I did not change setttings in hosts.deny, as I did not dare too.