Why is port 113 open by default?

Connection attempts to a service on the firewall will slow down if connection attempts to this port are dropped (which is the default policy of Endian Firewall). This is the ident port and services use it to check which remote user initiated the connection. Endian does not have an ident daemon running, so these connections must first timeout in order to establish the connection to the service.