"Connection refused" does not mean the port is blocked, it means nothing is listening on that port, which you would expect from an arbitrary high numbered port, since most services listen on well known lower numbered ports. If a connection is denied by tcpd (hosts.deny) then you don't get "connection refused", you get something like "connection closed by foreign host", i.e. the connection is actually made but then immediately dropped. --Greg