Systemd agent only_from like xinetd?

Can you not just firewall that port off?