RemoteAddrValve doesn"t work?

I am trying to restrict admin access to local host as described here:

http://www.onjava.com/pub/a/onjava/2003/06/25/tomcat_tips.ht ml?page=2

However, after uncommenting the valve configuration lines in the
default admin.xml, I can still access the administrator tool from a
remote host.

Is there something missing in the instructions? Here's my admin.xml:

privileged="true"
antiResourceLocking="false" antiJARLocking="false">


allow="127.0.0.1"/>

Any help is appreciated!