The /etc/hosts.allow file is a configuration file for the /usr/sbin/tcpd program. The hosts.allow file contains rules describing which hosts are allowed access to a service on your machine.

The default for LEAF is:

# /etc/hosts.allow: list of hosts that are allowed to access the system.  See
#                   hosts_access(5) and /usr/doc/net/portmapper.txt
#
# Example:    ALL: LOCAL @some_netgroup
#             ALL: .foobar.edu EXCEPT terminalserver.foobar.edu
#
# Allow anything from the local net
ALL: 192.168.1.0/255.255.255.0

Any host from the internal network in the 192.168.1.0/24 IP range will be allowed to access to ssh, www and stat through inetd.

If you want that only 192.168.1.1 from your internal network can access to the firewall through ssh and weblet, you will have:

ssh: 192.168.1.1/255.255.255.255
www: 192.168.1.1/255.255.255.255
stat: 192.168.1.1/255.255.255.255