only from this.host.com to telnet (admin doesn't want to open ssh port
because ssh is not _secure_ !!!)
Security is about managing risk....
To classify the risks of a well configured SSH daemon as higher than a well
configured telnet daemon shows that this particular admin is not managing
risk well. He's kind of flailing at a strategy without even knowing what a
strategy is.