locking down unused or unwanted ports in AIX

We have a system and we have modified the /etc/ind.conf and the
/etc/services and the /etc/rc.tcpip file to turn off specific applications.

I need to know what is the correct procedure for locking down unused
ports that still appear to be in a listen mode even if they are not in
/etc/services file.

If we run a netstat we can see port 65000 is listening but don't need
it or know what process is holding it open.

We have several such ports.
Please advise the correct method of locking down such ports.
I know we also have to block it with the FW rules but thats not good enough. We need to block the server from even allowing them to be used.

You could put that box behind a firewall and/or you can checkout these posts, how to find out which port is being used by what process: