Why not get tcp-wrappers from ftp.porcupine.org installed. What I was told about that package is that once you get it working correctly, you might take damage from cybercrackers but those crackers won't be able to hide their trails and won't be able to run anywhere you couldn't go to deal with them either.
