might well be!  so someone should add "service" option to [Init[ of hostsdeny action (with ALL being default value) and then it could be tuned in particular jail definition... might be worth a separate issue or better even a pull request