Not sure what you mean but ufw by default blocks everything on your interface so other machines in the local subnet shouldn't have access. If you want to have

Not sure what you mean but ufw by default blocks everything on your interface so other machines in the local subnet shouldn't have access. If you want to have more security and no (or just a single) outgoing service configure OpenVPN with TLS and put all your local services in a local subnet for your machine. So not even a portscan can find something.