Hi, After upgrading to bullseye, leafnode switched to systemd socket activation. As a side effect, access control settings in /etc/hosts.allow are no longer honored, and the service accepts connections from everywhere. According to README.Debian, the switch from inetd to systemd should not happen automatically. For me, however, it did. Reporting as important due to the security implications of having the service suddenly open.