If you really want this (and don't want to block all access except via VPN), can't you just use iptables to reroute 7071 to a different port?
Other way around: you'd want to reroute a different port to 7071. Yes, you should be able to, but it doesn't work for me. I can only get to the login screen. Same thing with proxying. VPN or SSH tunnel work though.