Listeners bindling to loopback listen only to loopback and no other places. The people outside can't connect to it even if your firewall is off.