And yes, port 20 is correct. I moved it.

Port 22 is endlessh - it will barf a broken banner. =) I imagine it'd be quite fun to trap some auto SSH agents, hue.