host.deny and spoofing

Hi all, here a question if i do a hosts.deny all and a host.allow imapd localhost could someone spoofing his ip to 127.0.0.1 still access the imap server? thanks Evert ------------------------------------ Apprearance deceives, nature doesn't ------------------------------------