aix tcp wrappers hosts.allow hosts.deny?

hi all

just installed the netsec.options.tcpwrapper from expansion pack, which used to be a rpm, for my aix 6.1 test box.

it is so unpredictable. i set up the hosts.deny as suggested for all and allow the sshd for specific ip addresses/hostnames.

the tcpdchk says the hosts allowed and tcpdmatch says they are denied. one moment the allowed host can ssh to the test box. next moment no one can.

what is the problems of the tcpwrappers?

my os is aix 6.1 tl06sp08. tcpwrappers is
netsec.options.tcpwrapper.base 1.1.0.0 COMMITTED TCP-wrapper

any idea?

thanks in advance,

F