I re-installed my server yesterday. I installed eggdrop with apt-get and uploaded a backup of the old config file.
Now it doesn't kick users matching a banmask, while +enforcebans is set, and the AllProtection-TCL also does not work - except of the autolimit.
You've set some host to a user with +f flag to something that matches also those your trying to ban. Possibly you added your friend "Bill" with the hostmask of "*!*@*comcast.net" to make it easy for Bill to change ident or IP range on his comcast setup or any others. Then bill can be in different places and still be known by the bot by messaging his password. The problem with this is then your bot won't kick comcast users at all when they are banned, as it doesn't kick its friends (+f). This is likely your scenario. Check the hosts records of those in your userlist for someone using a host that is much too wide (has * wildcards in places where it can match too much) and clean them up.