osxのlaunchその2 〜 only_from

xinetdではonly_fromの設定で接続元アドレスでサービスの利用制限ができます。
が、launchになると無くなりました。え〜〜〜

Migrating from xinetd

The main thing to keep in mind when migrating from xinetd is the InetdCompatibility key. Most of the service restrictions traditionally imposed from xinetd can be implemented through launchd. The most important exception is the only_from field in xinetd.conf files, which launchd doesn't implement. If you need to restrict the source addresses of internet service connections, use the standard Mac OS X Firewall service. Services run by xinetd are always run on demand.

launchはいつでも口あけてるので、制限したかったらFWでやれと。そんな・・・めんどくさい。