Re: I notice: tcp_wrappers deprecated
"probably because it does not play well with systemd"
Got that bassackwards. systemd doesn't play well with much of anything.
(If you don't know what tcp_wrappers is, read Wietse's paper on the subject here . It's a handy addition to your toolkit.)