use ipchains/iptables or tcwrappers. Also, disable or uninstall the services that you don't want (i.e nfs).
If you are using Red Hat, use lokkit. it has a predefined set of rules for ipchains that automatically disables NFS and remote X services.
Try this if you want to use iptables:
It's a gui based fwall config program.