I am running the latest version of FreePBX and I noticed that when you create an IAX extension/device, if you leave the default value in the deny field (0.0.0.0/0.0.0.0) it will refuse registration on that extension regardless of what you put on the allow field.
On the other hand if you create a SIP extension you can leave the default value in the deny field an registrations are not refused.