TCP 'Connection Refused' is sent by the LTM in case no VS is configured on this port. Can this be changed?

Due to Security Guidelines, I have to change the default behaviour of the LTM to suppress the 'Connection Refused' replies in case a TCP Connection is tried to be established to an unused TCP Port.

I know that this could be done using the Packet Filter - but I would like to avoid the use of the Packet Filter. An Idea would be to create a VS which matches to any port and attach an iRule which drops the request. But as this would increase the load on the F5 it's no option.... Is it possible to change the behaviour of the TMM?

Thanks, Rolf