ipSecurity configuration

Hi,

I've been configuration ip restrictions with help of the <ipSecurity>tag for my webapplication.

But I got a bit confused, have this section in my web.config:

<system.webServer>    <security><ipSecurity allowUnlisted="false" denyAction="Unauthorized"><clear/><add ipAddress="127.99.99.99" allowed="true" /></ipSecurity></security></system.webServer>

I'm coming from ip 127.0.0.1 but can still access the site. Isn't the configuration above meaning that it only should accept connections from 127.99.99.99, or am I missing something?

If I change the ipAddress line to: <add ipAddress="128.0.0.1" allowed="true" /> the site becomes unavailable.