Can still access SSH with another ip?

[marrrty]

OK so I set up CSF on centos, with webmin.

After enabling it and trying to access SSH with a VPN ip, I still get the login screen (and can still login).
When I try to access webmin via port 10000 I am however denied.

So what is the issue here? Why is the webmin port correctly blocked, but the SSH port not?
I am using a custom SSH port, is that the issue?

[marrrty]

I did notice in the config it says:

PORTS_sshd =
22
(restricted UI item)

But in my sshd_config the port is set to 2222. Is this due to incorrect parsing by CSF?