The point is that instead of an open port for a service you close all the ports you dont need open, and then firewall what you do need. I'm saying stuff like av

The point is that instead of an open port for a service you close all the ports you dont need open, and then firewall what you do need. I'm saying stuff like avahi isn't needed in my case so I turn it off and of course thats not the only measure so I run a firewall amongst other things...