I am running my own small UDP linux service on a dedicated server. my service responds to single-package requests with single-package responses. I don't want this server to do anything else. I don't want it to access or serve the web, allow remote logins, go out to log in elsewhere, download files, etc.
I do not need or want any TCP higher-level protocol access. I figure that if I just run my own UDP service (I don't even need DNS, but this is UDP), and TCP is not available, it would be VERY hard for a remote hacker to intrude. even running my service on a non-upgraded linux distro would then remain reasonably safe.
of course, I can install firewalls, on and around the server, to block all TCP traffic. (and then I would have to make sure that my admins don't have a weak moment, where they disable the firewall and punch through it.) thus, I would prefer the simplicity of not even having TCP enabled in the linux kernel--rather than having it, and then trying to block it.
I would presume that a similar strategy would be useful for many small devices that are now creeping up in our houses. I would want my lightbulbs to listen/respond to very simple UDP requests, and not run a full network stack all the way up to TCP.
is this possible in a linux-based system? or another unix-style OS?