deny host and auth users not working over ssh

[johnnyfulcrum]

Hi-

I have a solaris 8 box with the latest ssl, ssh, and rsync all set up.
 ssh and an apache-sll site are running good - I feel confident that
ssl and ssh are set up correctly, but when I use rsync over ssh, it
(rsync) will allow me to sync as any (system) user from any host ecven
though the rsyncd.conf file in /etc has user auth = <one real system
user> and host deny = *

is there something I'm missing here?  Seems I shouldn't be able to run
rsync