How secure is xinetd's binding to specific interfaces

[gaarder @ actech . com (Steve Gaarder)]

The "Swiss Bank" (SBC) enhancements to xinetd include the ability to
specify which interface to listen on for each service.  This would
seem to be a significant security win - for example, telnet could only
be made available on the "inside" interface, preventing anyone from
telnetting in from outside.  Besides making sure you have ip
forwarding turned off, are there any "gotchas" to doing this?

thanks,

Steven Gaarder                              Network and Systems Administrator
gaarder @
 actech .
 com                          A C Technology, Ithaca, N.Y., USA