There are several ways to achieve that: 1. Listen on UNIX socket only 2. Bind TCP socket to localhost only 3. Bind TCP socket and port, cut off connections a

There are several ways to achieve that: 1. Listen on UNIX socket only 2. Bind TCP socket to localhost only 3. Bind TCP socket and port, cut off connections at firewall level