You are both allowing and denying all possible hosts from that module.
Remove the `hosts deny = *` line and it should work.
You do have a `secrets file` defined, I hope, which contains the allowed user and the corresponding password. It looks like you don't, but perhaps you redacted some of the rsyncd.conf contents without telling us.