Ever Heard of This New Thing? (Score 1)

One doesn't even need a firewall, one just needs to install x-inetd with the 'instances' arguement. Which will limit how many daemons xinetd will spawn per service. I don't know of many ISPs that use inetd these days, almost all have switched to x-inetd for the virtual machine capabilities and the superior logging.