Kad files publish and source request do NOT respect ipfilter restrictions, but the sources got using Kad do.
The reason for that is that, if you are running Kad, you're indexing words and files from other clients too. With ipfilter, you would create a sub-network that would not be good for general Kad running.