bind xinetd to external port

I’ve setup a hello world service:

#!/bin/bash
echo "hello"

with xinetd:

service hello
{
	disable		= no
	socket_type	= stream
	protocol	= tcp
	port 		= 8000
	wait		= no
	user		= root
	server		= /home/github/hello
}

and opened port 8000 with ufw:

$ sudo ufw status
Status: active

To                         Action      From
--                         ------      ----
22                         ALLOW       Anywhere
8000                       ALLOW       Anywhere
8000 on eth0               ALLOW       Anywhere
22                         ALLOW       Anywhere (v6)
8000                       ALLOW       Anywhere (v6)
8000 on eth0               ALLOW       Anywhere (v6)

This works locally:

$ nc 127.0.0.1 8000
hello

but not from a remote machine:

 nc [filtered ip address] 8000
<hangs>

Any idea what I’m doing wrong?