Well actually you can close all of the nonsense you don't need in your /etc/inetd.conf file. And when you reboot the commented processes will be shutdown and the ports will be closed. And then you can edit /etc/hosts.allow&deny like you said. And when you run a firewall it will read the files and you're done! Good luck!
