RE: specify directory for specific port in the same host

I've tested 2 <server> config for different port,
and one is access-free, the other just allowed 2 IP access.
But I could still access the resource from IP not on the allow list.
The following is what I added:
		<security-constraint>
          <ip-constraint>
            <allow>127.0.0.1</allow>
            <allow>192.168.1.178</allow>
          </ip-constraint>
		</security-constraint>

When I connect from 192.168.1.108, should be blocked but didn't, why?