On a Linux machine, there is hosts.allow and hosts.deny to either allow or deny certain hosts to access services running on the machine.
The question is, what exactly is taking care of allowing or refusing those connections? Is there a daemon doing this, or is it the kernel, something else?