Jason and I found out that hosts.all/deny were beingread by
sshd, although we don't know where

Warner told me that it is a line in C that you uncomment