How to lock down telnet but leave it running

Hi all, 

We’ve got this application that requires telnet to run.  we want to block all incoming requests but allow telnet to be accessible by one user on one port.

how to do this?  can it be done with a firewall setting?

Thanks in advance,